CVE-2012-1426

CVE-2012-1426 describes a malware detection bypass vulnerability in the TAR file parsers of several antivirus products, including Quick Heal, Command Antivirus, F-Prot, K7 AntiVirus, Norman Antivirus, and Rising Antivirus. The vulnerability allows remote attackers to bypass detection by crafting a POSIX TAR file with a specific initial character sequence. With a CVSS score of 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N), this vulnerability is of medium complexity to exploit, requiring no authentication, and primarily impacts integrity by allowing malware to evade detection. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.