PatchTheCVECVE-2012-1463: The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHe
40
This week
MEDIUM 4.3DOWNGRADEDOWNGRADEDOWNGRADE
CVE-2012-1463 is a medium-severity flaw (CVSS 4.3) affecting v3 internet security, esafe, command antivirus. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.16160.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, Norman Antivirus 6.06.12, nProtect Anti-Virus 2011-01-17.01, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an ELF
Why this priority
- EPSS top 1%: very likely to be exploited
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.3 (Medium) |
| EPSS exploit chance | 94.2% (top 1%) |
| CISA exploited list | No |
| Weakness | CWE-264 |
| Published | 2012-03-21 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
ahnlab v3 internet security DOWNGRADE
Affected: 2011.01.18.00
Fixed in: no fixed release known
Safe to downgrade to: a release before 2011.01.18.00
1. Check installed version
apt-cache policy v3-internet-security || rpm -q v3-internet-security || v3-internet-security --version
2. No fixed release: DOWNGRADE to a release before 2011.01.18.00 (Debian / Ubuntu)
apt-cache madison v3-internet-security
sudo apt install v3-internet-security=<VERSION_BEFORE_2011.01.18.00>
sudo apt-mark hold v3-internet-security
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list v3-internet-security
sudo dnf downgrade v3-internet-security-<VERSION_BEFORE_2011.01.18.00>
sudo dnf versionlock add v3-internet-security
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
aladdin esafe DOWNGRADE
Affected: 7.0.17.0
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.0.17.0
1. Check installed version
apt-cache policy esafe || rpm -q esafe || esafe --version
2. No fixed release: DOWNGRADE to a release before 7.0.17.0 (Debian / Ubuntu)
apt-cache madison esafe
sudo apt install esafe=<VERSION_BEFORE_7.0.17.0>
sudo apt-mark hold esafe
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list esafe
sudo dnf downgrade esafe-<VERSION_BEFORE_7.0.17.0>
sudo dnf versionlock add esafe
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
authentium command antivirus DOWNGRADE
Affected: 5.2.11.5
Fixed in: no fixed release known
Safe to downgrade to: a release before 5.2.11.5
1. Check installed version
apt-cache policy command-antivirus || rpm -q command-antivirus || command-antivirus --version
2. No fixed release: DOWNGRADE to a release before 5.2.11.5 (Debian / Ubuntu)
apt-cache madison command-antivirus
sudo apt install command-antivirus=<VERSION_BEFORE_5.2.11.5>
sudo apt-mark hold command-antivirus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list command-antivirus
sudo dnf downgrade command-antivirus-<VERSION_BEFORE_5.2.11.5>
sudo dnf versionlock add command-antivirus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
bitdefender bitdefender DOWNGRADE
Affected: 7.2
Fixed in: no fixed release known
Safe to downgrade to: a release before 7.2
1. Check installed version
apt-cache policy bitdefender || rpm -q bitdefender || bitdefender --version
2. No fixed release: DOWNGRADE to a release before 7.2 (Debian / Ubuntu)
apt-cache madison bitdefender
sudo apt install bitdefender=<VERSION_BEFORE_7.2>
sudo apt-mark hold bitdefender
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list bitdefender
sudo dnf downgrade bitdefender-<VERSION_BEFORE_7.2>
sudo dnf versionlock add bitdefender
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
cat quick heal DOWNGRADE
Affected: 11.00
Fixed in: no fixed release known
Safe to downgrade to: a release before 11.00
1. Check installed version
apt-cache policy quick-heal || rpm -q quick-heal || quick-heal --version
2. No fixed release: DOWNGRADE to a release before 11.00 (Debian / Ubuntu)
apt-cache madison quick-heal
sudo apt install quick-heal=<VERSION_BEFORE_11.00>
sudo apt-mark hold quick-heal
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list quick-heal
sudo dnf downgrade quick-heal-<VERSION_BEFORE_11.00>
sudo dnf versionlock add quick-heal
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
comodo comodo antivirus DOWNGRADE
Affected: 7424
Fixed in: no fixed release known
Safe to downgrade to: a release before 7424
1. Check installed version
apt-cache policy comodo-antivirus || rpm -q comodo-antivirus || comodo-antivirus --version
2. No fixed release: DOWNGRADE to a release before 7424 (Debian / Ubuntu)
apt-cache madison comodo-antivirus
sudo apt install comodo-antivirus=<VERSION_BEFORE_7424>
sudo apt-mark hold comodo-antivirus
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list comodo-antivirus
sudo dnf downgrade comodo-antivirus-<VERSION_BEFORE_7424>
sudo dnf versionlock add comodo-antivirus
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2012-1463?
v3 internet security: downgrade or apply the listed mitigation; esafe: downgrade or apply the listed mitigation; command antivirus: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2012-1463 being exploited?
CVE-2012-1463 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2012-1463 affect?
CVE-2012-1463 affects v3 internet security, esafe, command antivirus. Severity is medium (CVSS 4.3). The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, F-Secure Anti-Virus 9.0.
How urgent is CVE-2012-1463?
Priority 40/100. EPSS top 1%: very likely to be exploited
Software pages
Related CVEs
- CVE-2013-3947 HIGH 7.8 DOWNGRADE Buffer overflow in MedCoreD.sys in AhnLab V3 Internet Security 8.0.7.5 (Build 1373) allows local users to gain
- CVE-2012-1462 MEDIUM 4.3 DOWNGRADE DOWNGRADE The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka
- CVE-2012-1459 MEDIUM 4.3 DOWNGRADE DOWNGRADE The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK
- CVE-2012-1443 MEDIUM 4.3 DOWNGRADE DOWNGRADE The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Da
- CVE-2012-1436 MEDIUM 4.3 DOWNGRADE DOWNGRADE The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, eSa