CVE-2012-1447: The ELF file parser in Fortinet Antivirus 4.2.254.0, eSafe 7.0.17.0, Dr.Web 5.0.2.03300, and Panda Antiviru...

Security readout for executives and security teams

This CVE describes a malware-detection bypass in several older antivirus products. A specially altered ELF executable could avoid detection because the antivirus parser mishandled the file's e_version field. The business risk is reduced protection against malicious Linux/Unix executables, not direct system compromise by itself. Exposure is most plausible where these specific legacy antivirus versions still scan ELF binaries in mail gateways, file upload paths, endpoints, or malware analysis pipelines. Current exposure is probably uncommon, but legacy appliances and frozen security stacks should be checked. Treat this as a legacy-control assurance issue. It is not documented as actively exploited, but affected antivirus versions could silently miss malware. Prioritize inventory and replacement if any listed versions remain in production. Mitigation focus: Identify whether the listed product versions are still deployed.; Check vendor advisories or support channels for fixed versions or replacements.; Upgrade, replace, or retire affected legacy antivirus engines..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.