CVE:CVE-2012-1457
CNNVD:CNNVD-201203-420
Avira AntiVir 7.11.1.163版本，Antiy Labs AVL SDK 2.0.3.7版本，avast! Antivirus 4.8.1351.0版本以及5.0.677.0版本，AVG Anti-Virus 10.0.0.1190版本，Bitdefender 7.2版本，Quick Heal（又称Cat QuickHeal）11.00版本，ClamAV 0.96.4版本，Command Antivirus 5.2.11.5版本，Emsisoft Anti-Malware 5.1.0.1版本，eSafe 7.0.17.0版本，F-Prot Antivirus 4.6.2.117版本，G Data AntiVirus 21版本，Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0版本，Jiangmin Antivirus 13.0.900版本，K7 AntiVirus 9.77.3565版本，Kaspersky Anti-Virus 7.0.0.125版本，McAfee Anti-Virus Scanning Engine 5.400.0.1158版本，McAfee Gateway (原为Webwasher) 2010.1C版本，和Microsoft Security Essentials 2.0中的Antimalware Engine 1.1.6402.0版本，NOD32 Antivirus 5795版本， Norman Antivirus 6.06.12版本， PC Tools AntiVirus 7.0.3.5版本，Rising Antivirus 22.83.00.03版本，和Symantec Endpoint Protection 11中的AVEngine 20101.3.0.103版本，Trend Micro AntiVirus 9.120.0.1004版本，Trend Micro HouseCall 9.120.0.1004版本，VBA32 3.12.14.2版本，和VirusBuster 13.6.151.0版本中的TAR文件解析器中存在漏洞。远程攻击者借助a! TAR归档文件超过总TAR文件大小的长度字段，绕过恶意软件检测。
solution:Upgrade aladdin esafe to a higher version than 7.0.17.0,and avoid the version 7.0.17.0; Upgrade alwil avast_antivirus to a higher version than 4.8.1351.0,5.0.677.0,and avoid the version 4.8.1351.0,5.0.677.0; Upgrade anti-virus vba32 to a higher version than 3.12.14.2,and avoid the version 3.12.14.2; Upgrade antiy avl_sdk to a higher version than 2.0.3.7,and avoid the version 2.0.3.7; Upgrade authentium command_antivirus to a higher version than 5.2.11.5,and avoid the version 5.2.11.5; Upgrade avg avg_anti-virus to a higher version than 10.0.0.1190,and avoid the version 10.0.0.1190; Upgrade avira antivir to a higher version than 7.11.1.163,and avoid the version 7.11.1.163; Upgrade bitdefender bitdefender to a higher version than 7.2,and avoid the version 7.2; Upgrade cat quick_heal to a higher version than 11.00,and avoid the version 11.00; Upgrade clamav clamav to a higher version than 0.96.4,and avoid the version 0.96.4; Upgrade emsisoft anti-malware to a higher version than 5.1.0.1,and avoid the version 5.1.0.1; Upgrade eset nod32_antivirus to a higher version than 5795,and avoid the version 5795; Upgrade f-prot f-prot_antivirus to a higher version than 4.6.2.117,and avoid the version 4.6.2.117; Upgrade gdata-software g_data_antivirus to a higher version than 21,and avoid the version 21; Upgrade ikarus ikarus_virus_utilities_t3_command_line_scanner to a higher version than 1.1.97.0,and avoid the version 1.1.97.0; Upgrade jiangmin jiangmin_antivirus to a higher version than 13.0.900,and avoid the version 13.0.900; Upgrade k7computing antivirus to a higher version than 9.77.3565,and avoid the version 9.77.3565; Upgrade kaspersky kaspersky_anti-virus to a higher version than 7.0.0.125,and avoid the version 7.0.0.125; Upgrade mcafee gateway to a higher version than 2010.1c,and avoid the version 2010.1c; Upgrade mcafee scan_engine to a higher version than 5.400.0.1158,and avoid the version 5.400.0.1158; Upgrade microsoft security_essentials to a higher version than 2.0,and avoid the version 2.0; Upgrade norman norman_antivirus_&_antispyware to a higher version than 6.06.12,and avoid the version 6.06.12; Upgrade pc_tools pc_tools_antivirus to a higher version than 7.0.3.5,and avoid the version 7.0.3.5; Upgrade rising-global rising_antivirus to a higher version than 22.83.00.03,and avoid the version 22.83.00.03; Upgrade symantec endpoint_protection to a higher version than 11.0,and avoid the version 11.0; Upgrade trendmicro housecall to a higher version than 9.120.0.1004,and avoid the version 9.120.0.1004; Upgrade trendmicro trend_micro_antivirus to a higher version than 9.120.0.1004,and avoid the version 9.120.0.1004; Upgrade virusbuster virusbuster to a higher version than 13.6.151.0,and avoid the version 13.6.151.0