THE BASE COLLECTIONCRDS / 0.1

CVE-2012-1456MEDIUM

Antivirus Engines

defense evasionT1027

Many antivirus engines read a crafted archive differently from the tools that later unpack it, which lets an attacker hide a malicious file where the scanner does not look.

CVSS

—

EPSS

100%

PATCH

Vendor

Update the scanning engines, and unpack archives with the same library twice rather than trusting a single pass.

SCRTY:CRDS / BASE SETREV. 01 ◆

Raw JSON

One vulnerability. The facts that matter.
A clear next move.

mediumREV. 01

CVE-2012-1456Antivirus Engines — Archive Parsing Differential

Many antivirus engines read a crafted archive differently from the tools that later unpack it, which lets an attacker hide a malicious file where the scanner does not look.

YOUR NEXT MOVE

Update the scanning engines, and unpack archives with the same library twice rather than trusting a single pass.

Read the risk

THE VITAL STATS

CVSS score: —/ 10
EPSS probability: 100%
Attack complexity: Low
Known exploited: Not listed
CVE published: 2012-03-21
Exploit published: Not recorded
Confidence: medium
Kill chain: defense evasion
MITRE ATT&CK: T1027
Severity: medium

Attacker needsAn archive the target will scan and then extract

Behind the card

1 REFERENCES

01CVE recordNVD recordnvd.nist.gov

Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

Fields	Source	Retrieved	Extractor	Confidence
exploitation.attack_complexity, exploitation.exploit_available, references, published_at	nvd.nist.gov	2026-08-07	scrty-crds-pipeline/0.1	high
epss	api.first.org	2026-08-07	scrty-crds-pipeline/0.1	high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites	nvd.nist.gov	2026-08-07	claude-code	high

Printing history

THE RECORD

r12026-09-20Initial base card

First printing. This card has not been reprinted since publication.