CVE-2020-9264
Medium
Description
ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
SeverityMedium
CVSS5.5
Exploit probability—
ProductEset Cyber Security
PublishedFeb 18, 2020
First seenFeb 18, 2020
How to fix
Update
- eset cyber_security1296 or later
- eset internet_security1296 or later
- eset mobile_security1296 or later
- eset nod32_antivirus1296 or later
- eset smart_security1296 or later
- eset smart_tv_security1296 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eset cyber_security | v < 1296 | 1296 |
| eset internet_security | v < 1296 | 1296 |
| eset mobile_security | v < 1296 | 1296 |
| eset nod32_antivirus | v < 1296, 4 | 1296 |
| eset smart_security | v < 1296 | 1296 |
| eset smart_tv_security | v < 1296 | 1296 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.