CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects Microsoft, Office. Its EPSS score suggests a 14.0% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2012-1438
Severity
MEDIUM
CVSS
4.3
EPSS
13.96%
Microsoft Office
Original NVD Description
The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.