CVE-2012-1460

CVE-2012-1460 describes a bypass vulnerability in the Gzip file parsers of several antivirus products, including Antiy Labs AVL SDK, Quick Heal, Command Antivirus, and others. This flaw allows remote attackers to evade malware detection by embedding malicious code within a .tar.gz file that contains stray bytes at the end. The vulnerability has a CVSS score of 4.3, indicating a medium severity with a network attack vector, medium attack complexity, and a potential impact of partial integrity loss (bypassing detection). There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage surrounding this CVE.