[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzHbP8JoRZBuyz3wv8XxVpxgceA66KzgkrruvGM1VbeQ":3,"g5a-risk:CVE-2012-1438":110},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":42,"references":43,"referencesCount":56,"weaknesses":57,"weaknessesCount":61,"isActivelyExploited":62,"cisaInfo":15,"otxData":15,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":99,"notableEvents":100},"CVE-2012-1438","What is CVE-2012-1438?","The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location.  NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.","The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file...","2012-03-21T10:11:47.897","2025-04-11T00:51:21.963",4.3,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,2.9,0.13964,[28,28,28,28,28,28,28],"Medium",[32,37],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"comodo","comodo_antivirus","7425","cpe:2.3:a:comodo:comodo_antivirus:7425:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"sophos","sophos_anti-virus","4.61.0","cpe:2.3:a:sophos:sophos_anti-virus:4.61.0:*:*:*:*:*:*:*",2,[44,48,52,54],{"url":45,"source":46,"tags":47},"http:\u002F\u002Fwww.ieee-security.org\u002FTC\u002FSP2012\u002Fprogram.html","Ieee-security",[],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F522005","Securityfocus",[],{"url":45,"source":46,"tags":53},[],{"url":49,"source":50,"tags":55},[],4,[58],{"id":59,"name":59,"description":60},"Unknown","CWE-264",1,false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2012-1438? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-1438, a medium severity cyber security vulnerability from 2012. The Microsoft Office file parser in Comodo Antivirus 7425 ...","CVE-2012-1438, CVE-2012-1438 vulnerability, CVE-2012-1438 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, comodo security, sophos security, comodo_antivirus vulnerability, sophos_anti-virus vulnerability","\u002Fwhat-is\u002Fcve-2012-1438",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-1438","Cybersecurity","CVE-2012-1438, CVE-2012-1438 vulnerability, CVE-2012-1438 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":15,"Negate":15,"Nodes":91},[92],{"Operator":93,"Negate":15,"CPEMatch":94},"OR",[95,97],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":96,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D0699893-B2EB-41AE-99C8-1A327AF5EAEE",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":98,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0912E21E-1EEB-4ADD-958F-F8AEBBF7C5E6",[],[101],{"id":102,"eventType":103,"eventTime":104,"details":105,"label":106,"color":107},"c9618384-7470-4771-9489-36719b1382cb","HIGH_EPSS_DELTA","2026-06-16T04:06:51.904424+00:00","Daily EPSS score increased by 0.126 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":109,"version":21},1792385834479,{"score":111,"band":112,"action":113,"scoredAt":114},19,"Info","Track","2026-10-17T06:38:44.310629+00:00"]