CVE:CVE-2012-1423
CNNVD:CNNVD-201203-389
Command Antivirus 5.2.11.5版本，Emsisoft Anti-Malware 5.1.0.1版本，F-Prot Antivirus 4.6.2.117版本，Fortinet Antivirus 4.2.254.0版本，Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0版本，K7 AntiVirus 9.77.3565版本，NOD32 Antivirus 5795版本，Norman Antivirus 6.06.12版本，PC Tools AntiVirus 7.0.3.5版本，Rising Antivirus 22.83.00.03版本，以及VirusBuster 13.6.151.0版本中的TAR文件解析器中存在漏洞。远程攻击者可利用该漏洞借助有初始的MZ字符序列的POSIX TAR文件，绕过恶意软件检测。
solution:Upgrade authentium command_antivirus to a higher version than 5.2.11.5,and avoid the version 5.2.11.5; Upgrade emsisoft anti-malware to a higher version than 5.1.0.1,and avoid the version 5.1.0.1; Upgrade eset nod32_antivirus to a higher version than 5795,and avoid the version 5795; Upgrade f-prot f-prot_antivirus to a higher version than 4.6.2.117,and avoid the version 4.6.2.117; Upgrade fortinet fortinet_antivirus to a higher version than 4.2.254.0,and avoid the version 4.2.254.0; Upgrade ikarus ikarus_virus_utilities_t3_command_line_scanner to a higher version than 1.1.97.0,and avoid the version 1.1.97.0; Upgrade k7computing antivirus to a higher version than 9.77.3565,and avoid the version 9.77.3565; Upgrade norman norman_antivirus_&_antispyware to a higher version than 6.06.12,and avoid the version 6.06.12; Upgrade pc_tools pc_tools_antivirus to a higher version than 7.0.3.5,and avoid the version 7.0.3.5; Upgrade rising-global rising_antivirus to a higher version than 22.83.00.03,and avoid the version 22.83.00.03; Upgrade virusbuster virusbuster to a higher version than 13.6.151.0,and avoid the version 13.6.151.0