CVE-2012-1456: The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7...

Security readout for executives and security teams

This CVE describes a malware-detection bypass in many older antivirus products. A specially formed TAR archive with appended ZIP content could avoid detection by affected scanners. It is not described as direct system compromise, but it weakens a control many organizations rely on to stop malicious files. Exposure is mainly legacy: organizations still running the named antivirus versions or embedded gateway scanners from that era. Modern products may be unaffected, but confirm engine versions, gateway appliances, and archive-scanning behavior rather than relying on product names alone. Treat as a legacy-control assurance issue. Prioritize if the organization still depends on older antivirus gateways or endpoint engines for malware screening. Otherwise, record as historical and verify current engine coverage through vendor support channels. Mitigation focus: Check vendor advisories and upgrade affected antivirus engines or gateways.; Retire the named legacy product versions where still deployed.; Use layered controls beyond antivirus for inbound archive inspection..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.