CVE:CVE-2012-1460
CNNVD:CNNVD-201203-423
Antiy Labs AVL SDK 2.0.3.7版本，Quick Heal（也称Cat QuickHeal）11.00版本，Command Antivirus 5.2.11.5版本，eSafe 7.0.17.0，F-Prot Antivirus 4.6.2.117版本，Jiangmin Antivirus 13.0.900版本，K7 AntiVirus 9.77.3565版本，以及VBA32 3.12.14.2版本中的Gzip文件解析器中存在漏洞。远程攻击者可利用该漏洞借助以stray字节结束的.tar.gz文件绕过恶意文件检测。
solution:Upgrade aladdin esafe to a higher version than 7.0.17.0,and avoid the version 7.0.17.0; Upgrade anti-virus vba32 to a higher version than 3.12.14.2,and avoid the version 3.12.14.2; Upgrade antiy avl_sdk to a higher version than 2.0.3.7,and avoid the version 2.0.3.7; Upgrade authentium command_antivirus to a higher version than 5.2.11.5,and avoid the version 5.2.11.5; Upgrade cat quick_heal to a higher version than 11.00,and avoid the version 11.00; Upgrade f-prot f-prot_antivirus to a higher version than 4.6.2.117,and avoid the version 4.6.2.117; Upgrade jiangmin jiangmin_antivirus to a higher version than 13.0.900,and avoid the version 13.0.900; Upgrade k7computing antivirus to a higher version than 9.77.3565,and avoid the version 9.77.3565