CVE-2012-1429: Aladdin Esafe

Medium severity, CVSS 4.3. EPSS: 92.5% chance of exploitation in the next 30 days.

The ELF file parser in Bitdefender 7.2, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Secure Anti-Virus 9.0.16160.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, and nProtect Anti-Virus 2011-01-17.01 allows remote attackers to bypass malware detection via an ELF file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different ELF parser implementations.

Affected products

• Aladdin Esafe: version 7.0.17.0 only
• Comodo Comodo Antivirus: version 7424 only
• Emsisoft Anti-Malware: version 5.1.0.1 only
• F-Secure F-Secure Anti-Virus: version 9.0.16160.0 only
• Ikarus Ikarus Virus Utilities t3 Command Line Scanner: version 1.1.97.0 only
• McAfee Gateway: version 2010.1c only
• McAfee Scan Engine: version 5.400.0.1158 only
• Nprotect Nprotect Antivirus: version 2011-01-17.01 only
• Softwin Bitdefender: version 7.2 only

Published 2012-03-21. Last modified 2026-06-16.