CVE-2020-9399 - The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive

Back Back to CVE browser

MEDIUM

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive

Published Feb 28, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 1.16%

Description

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-436

References (3)

https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30220
Advisory
https://seclists.org/fulldisclosure/2020/Feb/35
x_refsource_MISCMailing ListThird Party Advisory

Link	Providers	Tags
https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30220		Advisory
https://seclists.org/fulldisclosure/2020/Feb/35		x_refsource_MISCMailing ListThird Party Advisory