CVE-2012-1462

CVE-2012-1462 describes a bypass vulnerability in the ZIP file parsers of several antivirus products, including AhnLab V3, AVG Anti-Virus, Quick Heal, Emsisoft Anti-Malware, Fortinet Antivirus, Ikarus, Jiangmin Antivirus, Kaspersky Anti-Virus, Norman Antivirus, Sophos Anti-Virus, and Symantec Endpoint Protection. An attacker can exploit this by crafting a ZIP file with an invalid data block at the beginning, allowing malware to evade detection. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial integrity impact, but no confidentiality or availability impact. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.