CVE-2012-1454: The ELF file parser in Dr.Web 5.0.2.03300, eSafe 7.0.17.0, McAfee Gateway (formerly Webwasher) 2010.1C, Ris...

Security readout for executives and security teams

This CVE describes a malware-detection bypass in several older antivirus products. A specially malformed Linux ELF executable could avoid detection because the scanner parsed one ELF header field incorrectly. Business risk is highest where these legacy scanners are still used as a control for file uploads, email, web gateways, or Linux malware inspection. Exposure is likely limited to organizations still running the named legacy antivirus or gateway versions, or systems that inherited them in archived scanning workflows. The CVE record’s structured affected field is not populated, so product exposure should be verified against installed versions and vendor records. Treat this as a targeted legacy-control risk, not a current emergency based on the supplied evidence. Prioritize verification if these scanners protect file-transfer, gateway, or upload workflows. If the products are no longer present, residual business urgency is low. Mitigation focus: Inventory for the named antivirus and gateway versions.; Check each vendor’s historical guidance or support records.; Do not rely on affected scanners as the only ELF malware control..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.