CVE-2012-1459

CVE-2012-1459 describes a bypass vulnerability in the TAR file parsers of numerous antivirus products, including AhnLab, Avira, Avast, AVG, Bitdefender, and Microsoft Security Essentials. This flaw allows remote attackers to evade malware detection by crafting a TAR archive entry with a manipulated length field that overlaps with the header of the subsequent entry. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and potentially leading to partial integrity impact (malware bypass). While its EPSS score is high at 0.7955, suggesting a higher likelihood of exploitation compared to most CVEs, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.