CVE:CVE-2012-1453
CNNVD:CNNVD-201203-416
Dr.Web 5.0.2.03300版本，Trend Micro HouseCall 9.120.0.1004版本，Kaspersky Anti-Virus 7.0.0.125版本，Sophos Anti-Virus 4.61.0版本，Trend Micro AntiVirus 9.120.0.1004版本，McAfee Gateway (原为Webwasher) 2010.1C版本，Emsisoft Anti-Malware 5.1.0.1版本，CA eTrust Vet Antivirus 36.1.8511版本，Antiy Labs AVL SDK 2.0.3.7版本，和Microsoft Security Essentials 2.0中的Antimalware Engine 1.1.6402.0版本，Rising Antivirus 22.83.00.03版本，Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0版本，Fortinet Antivirus 4.2.254.0以及Panda Antivirus 10.0.2.7版本中的CAB文件解析器中存在漏洞。远程攻击者可利用该漏洞借助修改过coffFiles字段的CAB文件，绕过恶意软件检测。
solution:Upgrade antiy avl_sdk to a higher version than 2.0.3.7,and avoid the version 2.0.3.7; Upgrade ca etrust_vet_antivirus to a higher version than 36.1.8511,and avoid the version 36.1.8511; Upgrade drweb dr.web_antivirus to a higher version than 5.0.2.03300,and avoid the version 5.0.2.03300; Upgrade emsisoft anti-malware to a higher version than 5.1.0.1,and avoid the version 5.1.0.1; Upgrade fortinet fortinet_antivirus to a higher version than 4.2.254.0,and avoid the version 4.2.254.0; Upgrade ikarus ikarus_virus_utilities_t3_command_line_scanner to a higher version than 1.1.97.0,and avoid the version 1.1.97.0; Upgrade kaspersky kaspersky_anti-virus to a higher version than 7.0.0.125,and avoid the version 7.0.0.125; Upgrade mcafee gateway to a higher version than 2010.1c,and avoid the version 2010.1c; Upgrade microsoft security_essentials to a higher version than 2.0,and avoid the version 2.0; Upgrade pandasecurity panda_antivirus to a higher version than 10.0.2.7,and avoid the version 10.0.2.7; Upgrade rising-global rising_antivirus to a higher version than 22.83.00.03,and avoid the version 22.83.00.03; Upgrade sophos sophos_anti-virus to a higher version than 4.61.0,and avoid the version 4.61.0; Upgrade trendmicro housecall to a higher version than 9.120.0.1004,and avoid the version 9.120.0.1004; Upgrade trendmicro trend_micro_antivirus to a higher version than 9.120.0.1004,and avoid the version 9.120.0.1004