CVEvulnerability
CVE-2020-9362
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-02-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-436
Description
The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.
Affected configurations
• quickheal antivirus for server 2019-11
• quickheal antivirus pro 2019-11
• quickheal home security 2019-11
• quickheal internet security 2019-11
• quickheal total security 2019-11
• quickheal total security multi-device 2019-11
Related
Weakness · CWE (1)
- CWE-436 Interpretation Conflict weakness
References
- http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Mar/14 Mailing List, Third Party Advisory
- https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.html Third Party Advisory
- https://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.html Third Party Advisory
- http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.html Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2020/Mar/14 Mailing List, Third Party Advisory
- https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.html Third Party Advisory
- https://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.html Third Party Advisory