THE BASE COLLECTIONCRDS / 0.1

CVE-2012-1459MEDIUM

Antivirus Engines

defense evasionT1027

A second group of antivirus engines reads a crafted archive differently from the tools that later unpack it, which lets an attacker hide a malicious file where the scanner does not look.

CVSS

—

EPSS

100%

PATCH

Vendor

Update the scanning engines, and unpack archives with the same library the scanner used.

SCRTY:CRDS / BASE SETREV. 01 ◆

Raw JSON

One vulnerability. The facts that matter.
A clear next move.

mediumREV. 01

CVE-2012-1459Antivirus Engines — Archive Parsing Differential, Second Set

A second group of antivirus engines reads a crafted archive differently from the tools that later unpack it, which lets an attacker hide a malicious file where the scanner does not look.

YOUR NEXT MOVE

Update the scanning engines, and unpack archives with the same library the scanner used.

Read the risk

THE VITAL STATS

CVSS score: —/ 10
EPSS probability: 100%
Attack complexity: Low
Known exploited: Not listed
CVE published: 2012-03-21
Exploit published: Not recorded
Confidence: medium
Kill chain: defense evasion
MITRE ATT&CK: T1027
Severity: medium

Attacker needsAn archive the target will scan and then extract

Behind the card

1 REFERENCES

01CVE recordNVD recordnvd.nist.gov

Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

Fields	Source	Retrieved	Extractor	Confidence
exploitation.attack_complexity, exploitation.exploit_available, references, published_at	nvd.nist.gov	2026-08-07	scrty-crds-pipeline/0.1	high
epss	api.first.org	2026-08-07	scrty-crds-pipeline/0.1	high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisites	nvd.nist.gov	2026-08-07	claude-code	high

Printing history

THE RECORD

r12026-09-20Initial base card

First printing. This card has not been reprinted since publication.