CVE-2012-1438: The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attack...

Security readout for executives and security teams

This CVE describes a way for a crafted Microsoft Office file to evade malware detection in specific older antivirus parsers. The business risk is reduced confidence in scanning controls, not direct system takeover. The sources do not provide CVSS, a named patch, or evidence of active exploitation. Exposure is likely limited to environments still using the named legacy antivirus versions or inherited scanning components for Office documents. The CVE record has no CPEs, no supported-version mapping, and no current vendor advisory details in the provided sources. Low near-term priority unless the named legacy antivirus versions remain in production. If they do, prioritize replacement or vendor-confirmed updates because the weakness undermines a preventive control for Office-borne malware. There is no provided evidence of active exploitation. Mitigation focus: Identify whether Comodo Antivirus 7425 or Sophos Anti-Virus 4.61.0 remains deployed.; Check vendor guidance or historical advisories for parser updates or supported replacements.; Retire unsupported antivirus versions from endpoint, mail, and file-ingestion paths..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.