« Volver al listado

CVE-2020-9264

Estado: ModificadaMedia (5.5)—

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Eset — Cyber SecurityEset — Internet SecurityEset — Mobile SecurityEset — Nod32 AntivirusEset — Smart SecurityEset — Smart TV Security

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9264",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-02-18T15:15:12.787",
  "references": [
    {
      "url": "http://seclists.org/fulldisclosure/2020/Feb/21",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.eset.com/en/ca7387-modules-review-december-2019",
      "tags": [
        "Release Notes"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Feb/21",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.eset.com/en/ca7387-modules-review-december-2019",
      "tags": [
        "Release Notes"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-436"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop."
    },
    {
      "lang": "es",
      "value": "ESET Archive Support Module versiones anteriores a 1296, permite omitir la detección de virus por medio de un Compression Information Field diseñado en un archivo ZIP. Esto afecta a las versiones anteriores a 1294 de Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security para Android, Smart TV Security y NOD32 Antivirus 4 para Linux Desktop."
    }
  ],
  "lastModified": "2026-06-17T03:27:39.833",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:eset:cyber_security:*:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5371D3C6-AB34-4535-BB2D-767EF3D74B8D",
              "versionEndExcluding": "1296"
            },
            {
              "criteria": "cpe:2.3:a:eset:cyber_security:*:*:*:*:pro:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6AB0EFCD-D718-422C-964E-8B87DD7ED448",
              "versionEndExcluding": "1296"
            },
            {
              "criteria": "cpe:2.3:a:eset:internet_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F6FA874-7D7F-4E56-9472-47A576F5E720",
              "versionEndExcluding": "1296"
            },
            {
              "criteria": "cpe:2.3:a:eset:mobile_security:*:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "77734CD3-BE20-47C8-B2A5-86FEED181E79",
              "versionEndExcluding": "1296"
            },
            {
              "criteria": "cpe:2.3:a:eset:nod32_antivirus:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7537106-687B-4026-A4B6-AE9307FB2440",
              "versionEndExcluding": "1296"
            },
            {
              "criteria": "cpe:2.3:a:eset:nod32_antivirus:4:*:*:*:*:linux:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCB077E5-6496-4FA9-A552-692A18B04287"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_security:*:*:*:*:premium:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A4983DD-34FC-4A06-A875-AFD11C48DC94",
              "versionEndExcluding": "1296"
            },
            {
              "criteria": "cpe:2.3:a:eset:smart_tv_security:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7E99AF2-4ADD-4295-8D01-8AB2C998FD4C",
              "versionEndExcluding": "1296"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}