CVE-2012-1430: The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0

This week

MEDIUM 4.3DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2012-1430 is a medium-severity flaw (CVSS 4.3) affecting esafe, bitdefender, comodo antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01, Sophos Anti-Virus 4.61.0, and Rising Antivirus 22.83.00.03 allows remote attackers to bypass malware detection via an ELF file with a \19\04\00\10 character sequence at a certain location. NOTE: this may later

Why this priority

EPSS top 1%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	4.3 (Medium)
EPSS exploit chance	96.0% (top 1%)
CISA exploited list	No
Weakness	CWE-264
Published	2012-03-21
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: aladdin · bitdefender · comodo · f-secure · mcafee

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2012-03-21 10:11 UTCPublished CVE record published
2026-06-16 23:39 UTCUpdated Record last modified

aladdin esafe DOWNGRADE

Affected: 7.0.17.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.0.17.0

1. Check installed version

apt-cache policy esafe || rpm -q esafe || esafe --version

2. No fixed release: DOWNGRADE to a release before 7.0.17.0 (Debian / Ubuntu)

apt-cache madison esafe sudo apt install esafe=<VERSION_BEFORE_7.0.17.0> sudo apt-mark hold esafe

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list esafe sudo dnf downgrade esafe-<VERSION_BEFORE_7.0.17.0> sudo dnf versionlock add esafe

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

bitdefender bitdefender DOWNGRADE

Affected: 7.2

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.2

1. Check installed version

apt-cache policy bitdefender || rpm -q bitdefender || bitdefender --version

2. No fixed release: DOWNGRADE to a release before 7.2 (Debian / Ubuntu)

apt-cache madison bitdefender sudo apt install bitdefender=<VERSION_BEFORE_7.2> sudo apt-mark hold bitdefender

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list bitdefender sudo dnf downgrade bitdefender-<VERSION_BEFORE_7.2> sudo dnf versionlock add bitdefender

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

comodo comodo antivirus DOWNGRADE

Affected: 7424

Fixed in: no fixed release known

Safe to downgrade to: a release before 7424

1. Check installed version

apt-cache policy comodo-antivirus || rpm -q comodo-antivirus || comodo-antivirus --version

2. No fixed release: DOWNGRADE to a release before 7424 (Debian / Ubuntu)

apt-cache madison comodo-antivirus sudo apt install comodo-antivirus=<VERSION_BEFORE_7424> sudo apt-mark hold comodo-antivirus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list comodo-antivirus sudo dnf downgrade comodo-antivirus-<VERSION_BEFORE_7424> sudo dnf versionlock add comodo-antivirus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

f-secure anti-virus DOWNGRADE

Affected: 9.0.16160.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 9.0.16160.0

1. Check installed version

apt-cache policy anti-virus || rpm -q anti-virus || anti-virus --version

2. No fixed release: DOWNGRADE to a release before 9.0.16160.0 (Debian / Ubuntu)

apt-cache madison anti-virus sudo apt install anti-virus=<VERSION_BEFORE_9.0.16160.0> sudo apt-mark hold anti-virus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list anti-virus sudo dnf downgrade anti-virus-<VERSION_BEFORE_9.0.16160.0> sudo dnf versionlock add anti-virus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

mcafee gateway DOWNGRADE

Affected: 2010.1c

Fixed in: no fixed release known

Safe to downgrade to: a release before 2010.1c

1. Check installed version

apt-cache policy gateway || rpm -q gateway || gateway --version

2. No fixed release: DOWNGRADE to a release before 2010.1c (Debian / Ubuntu)

apt-cache madison gateway sudo apt install gateway=<VERSION_BEFORE_2010.1c> sudo apt-mark hold gateway

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list gateway sudo dnf downgrade gateway-<VERSION_BEFORE_2010.1c> sudo dnf versionlock add gateway

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

mcafee scan engine DOWNGRADE

Affected: 5.400.0.1158

Fixed in: no fixed release known

Safe to downgrade to: a release before 5.400.0.1158

1. Check installed version

apt-cache policy scan-engine || rpm -q scan-engine || scan-engine --version

2. No fixed release: DOWNGRADE to a release before 5.400.0.1158 (Debian / Ubuntu)

apt-cache madison scan-engine sudo apt install scan-engine=<VERSION_BEFORE_5.400.0.1158> sudo apt-mark hold scan-engine

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list scan-engine sudo dnf downgrade scan-engine-<VERSION_BEFORE_5.400.0.1158> sudo dnf versionlock add scan-engine

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2012-1430?

esafe: downgrade or apply the listed mitigation; bitdefender: downgrade or apply the listed mitigation; comodo antivirus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2012-1430 being exploited?

CVE-2012-1430 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2012-1430 affect?

CVE-2012-1430 affects esafe, bitdefender, comodo antivirus. Severity is medium (CVSS 4.3). The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, nProtect Anti-Virus 2011-01-17.01,

How urgent is CVE-2012-1430?

Priority 40/100. EPSS top 1%: very likely to be exploited

Software pages

Sophos vulnerabilities · McAfee vulnerabilities

Related CVEs

CVE-2012-1463 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHe
CVE-2012-1462 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka
CVE-2012-1460 MEDIUM 4.3 DOWNGRADE DOWNGRADE The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.
CVE-2012-1457 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5
CVE-2012-1456 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424

References

← Back to latest CVEs