CVE-2012-1446: The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, A

This week

MEDIUM 4.3DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2012-1446 is a medium-severity flaw (CVSS 4.3) affecting esafe, avl sdk, etrust vet antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway (formerly Webwasher) 2010.1C, Sophos Anti-Virus 4.61.0, CA eTrust Vet Antivirus 36.1.8511, Antiy Labs AVL SDK 2.0.3.7, PC Tools AntiVirus 7.0.3.5, Rising Antivirus 22.83.00.03, Fortinet Antivir

Why this priority

EPSS top 1%: very likely to be exploited

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	4.3 (Medium)
EPSS exploit chance	99.7% (top 1%)
CISA exploited list	No
Weakness	CWE-264
Published	2012-03-21
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: aladdin · antiy · ca · cat · fortinet · kaspersky

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2012-03-21 10:11 UTCPublished CVE record published
2026-06-16 23:39 UTCUpdated Record last modified

aladdin esafe DOWNGRADE

Affected: 7.0.17.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.0.17.0

1. Check installed version

apt-cache policy esafe || rpm -q esafe || esafe --version

2. No fixed release: DOWNGRADE to a release before 7.0.17.0 (Debian / Ubuntu)

apt-cache madison esafe sudo apt install esafe=<VERSION_BEFORE_7.0.17.0> sudo apt-mark hold esafe

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list esafe sudo dnf downgrade esafe-<VERSION_BEFORE_7.0.17.0> sudo dnf versionlock add esafe

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

antiy avl sdk DOWNGRADE

Affected: 2.0.3.7

Fixed in: no fixed release known

Safe to downgrade to: a release before 2.0.3.7

1. Check installed version

apt-cache policy avl-sdk || rpm -q avl-sdk || avl-sdk --version

2. No fixed release: DOWNGRADE to a release before 2.0.3.7 (Debian / Ubuntu)

apt-cache madison avl-sdk sudo apt install avl-sdk=<VERSION_BEFORE_2.0.3.7> sudo apt-mark hold avl-sdk

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list avl-sdk sudo dnf downgrade avl-sdk-<VERSION_BEFORE_2.0.3.7> sudo dnf versionlock add avl-sdk

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

ca etrust vet antivirus DOWNGRADE

Affected: 36.1.8511

Fixed in: no fixed release known

Safe to downgrade to: a release before 36.1.8511

1. Check installed version

apt-cache policy etrust-vet-antivirus || rpm -q etrust-vet-antivirus || etrust-vet-antivirus --version

2. No fixed release: DOWNGRADE to a release before 36.1.8511 (Debian / Ubuntu)

apt-cache madison etrust-vet-antivirus sudo apt install etrust-vet-antivirus=<VERSION_BEFORE_36.1.8511> sudo apt-mark hold etrust-vet-antivirus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list etrust-vet-antivirus sudo dnf downgrade etrust-vet-antivirus-<VERSION_BEFORE_36.1.8511> sudo dnf versionlock add etrust-vet-antivirus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

cat quick heal DOWNGRADE

Affected: 11.00

Fixed in: no fixed release known

Safe to downgrade to: a release before 11.00

1. Check installed version

apt-cache policy quick-heal || rpm -q quick-heal || quick-heal --version

2. No fixed release: DOWNGRADE to a release before 11.00 (Debian / Ubuntu)

apt-cache madison quick-heal sudo apt install quick-heal=<VERSION_BEFORE_11.00> sudo apt-mark hold quick-heal

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list quick-heal sudo dnf downgrade quick-heal-<VERSION_BEFORE_11.00> sudo dnf versionlock add quick-heal

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

fortinet fortinet antivirus DOWNGRADE

Affected: 4.2.254.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 4.2.254.0

1. Check installed version

apt-cache policy fortinet-antivirus || rpm -q fortinet-antivirus || fortinet-antivirus --version

2. No fixed release: DOWNGRADE to a release before 4.2.254.0 (Debian / Ubuntu)

apt-cache madison fortinet-antivirus sudo apt install fortinet-antivirus=<VERSION_BEFORE_4.2.254.0> sudo apt-mark hold fortinet-antivirus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list fortinet-antivirus sudo dnf downgrade fortinet-antivirus-<VERSION_BEFORE_4.2.254.0> sudo dnf versionlock add fortinet-antivirus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

kaspersky kaspersky anti-virus DOWNGRADE

Affected: 7.0.0.125

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.0.0.125

1. Check installed version

apt-cache policy kaspersky-anti-virus || rpm -q kaspersky-anti-virus || kaspersky-anti-virus --version

2. No fixed release: DOWNGRADE to a release before 7.0.0.125 (Debian / Ubuntu)

apt-cache madison kaspersky-anti-virus sudo apt install kaspersky-anti-virus=<VERSION_BEFORE_7.0.0.125> sudo apt-mark hold kaspersky-anti-virus

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list kaspersky-anti-virus sudo dnf downgrade kaspersky-anti-virus-<VERSION_BEFORE_7.0.0.125> sudo dnf versionlock add kaspersky-anti-virus

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2012-1446?

esafe: downgrade or apply the listed mitigation; avl sdk: downgrade or apply the listed mitigation; etrust vet antivirus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2012-1446 being exploited?

CVE-2012-1446 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2012-1446 affect?

CVE-2012-1446 affects esafe, avl sdk, etrust vet antivirus. Severity is medium (CVSS 4.3). The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125

How urgent is CVE-2012-1446?

Priority 40/100. EPSS top 1%: very likely to be exploited

Software pages

Fortinet vulnerabilities · Sophos vulnerabilities · McAfee vulnerabilities · Symantec and Broadcom vulnerabilities · Kaspersky vulnerabilities

Related CVEs

CVE-2012-1463 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHe
CVE-2012-1462 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka
CVE-2012-1460 MEDIUM 4.3 DOWNGRADE DOWNGRADE The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.
CVE-2012-1457 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5
CVE-2012-1456 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424

References

← Back to latest CVEs