CVE-2012-1425

CVE-2012-1425 describes a bypass vulnerability in the TAR file parsers of numerous antivirus products, including Avira, Emsisoft, Kaspersky, McAfee, Symantec, and Trend Micro. This flaw allows remote attackers to evade malware detection by crafting a POSIX TAR file that begins with a specific character sequence (\50\4B\03\04). The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and primarily impacting integrity (potential for bypassing security controls). While the EPSS score is relatively low, the FAUCET Risk Score is high at 96/100, suggesting a significant potential for impact despite the lower CVSS. Currently, there is no known active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention from the security community.