CVEvulnerability

CVE-2020-9264

5.5 MEDIUM Published 2020-02-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-02-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-436

Description

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

Affected configurations

• eset cyber security (< 1296) • eset internet security (< 1296) • eset mobile security (< 1296) • eset nod32 antivirus (< 1296) • eset nod32 antivirus 4 • eset smart security (< 1296) • eset smart tv security (< 1296)

Related

Weakness · CWE (1)

  • CWE-436 Interpretation Conflict weakness

References