Medium severity · published Feb 18, 2020
CVE-2020-9264
ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive
5.5
CVSS
1.2%
EPSS
No
On KEV
Description
ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cyber Security · Eset
before 1296; before 1296 · source: NVD
IS
Internet Security · Eset
before 1296 · source: NVD
MS
Mobile Security · Eset
before 1296 · source: NVD
NA
Nod32 Antivirus · Eset
before 1296; 4 · source: NVD
SS
Smart Security · Eset
before 1296 · source: NVD
ST
Smart TV Security · Eset
before 1296 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-9264
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-9264
Mailing List
http://seclists.org/fulldisclosure/2020/Feb/21
Third Party Advisory
https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html
Release Notes
https://support.eset.com/en/ca7387-modules-review-december-2019
More from Cyber Security
9.8
CVE-2020-10180
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
7.8
CVE-2023-2847
During internal security analysis, a local privilege escalation vulnerability has been identified
7.8
CVE-2019-16519
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks
7.5
CVE-2020-10193
ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive
6.7
CVE-2019-19792
A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files