THE BASE COLLECTIONCRDS / 0.1

CVE-2012-1446MEDIUM

Antivirus Engines

defense evasionT1027

Several antivirus engines parse a crafted Unix executable differently from the system that will run it, which lets an attacker ship a binary the scanner reads as harmless.

CVSS

—

EPSS

100%

PATCH

Vendor

Update the scanning engines, and treat scanner verdicts on malformed binaries as unreliable.

SCRTY:CRDS / BASE SETREV. 01 ◆

Raw JSON

One vulnerability. The facts that matter.
A clear next move.

mediumREV. 01

CVE-2012-1446Antivirus Engines — Executable Parsing Differential

Several antivirus engines parse a crafted Unix executable differently from the system that will run it, which lets an attacker ship a binary the scanner reads as harmless.

YOUR NEXT MOVE

Update the scanning engines, and treat scanner verdicts on malformed binaries as unreliable.

Read the risk

THE VITAL STATS

CVSS score: —/ 10
EPSS probability: 100%
Attack complexity: Low
Known exploited: Not listed
CVE published: 2012-03-21
Exploit published: Not recorded
Confidence: medium
Kill chain: defense evasion
MITRE ATT&CK: T1027
Severity: medium

Attacker needsA binary the target will scan and then execute

Behind the card

1 REFERENCES

01CVE recordNVD recordnvd.nist.gov

Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

Fields	Source	Retrieved	Extractor	Confidence
exploitation.attack_complexity, exploitation.exploit_available, references, published_at	nvd.nist.gov	2026-08-07	scrty-crds-pipeline/0.1	high
epss	api.first.org	2026-08-07	scrty-crds-pipeline/0.1	high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites	nvd.nist.gov	2026-08-07	claude-code	high

Printing history

THE RECORD

r12026-09-20Initial base card

First printing. This card has not been reprinted since publication.