« Volver al listado

CVE-2020-9362

Estado: ModificadaAlta (7.8)—

The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (6)

Quickheal — Antivirus FOR ServerQuickheal — Antivirus PROQuickheal — Home SecurityQuickheal — Internet SecurityQuickheal — Total SecurityQuickheal — Total Security Multi-device

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-9362",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-02-24T16:15:13.187",
  "references": [
    {
      "url": "http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Mar/14",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.html",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2020/Mar/14",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-436"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android."
    },
    {
      "lang": "es",
      "value": "El motor de análisis de Quick Heal AV (Noviembre 2019),  permite una omisión de la detección de virus por medio de un GPFLAG diseñado en un archivo ZIP. Esto afecta a Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, y Total Security for Android."
    }
  ],
  "lastModified": "2026-06-17T03:27:48.933",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:quickheal:antivirus_for_server:2019-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "245F4E07-1C25-42E4-A3D3-A89C63D07327"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:antivirus_pro:2019-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B673E64-F0F7-481B-B63F-6CD15F9522E6"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:home_security:2019-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2018BCE3-38B4-4A02-A2B7-AAD24E4C2D6E"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:internet_security:2019-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC85E414-60AE-42E4-9DFF-29E8B9221F1C"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:total_security:2019-11:*:*:*:*:-:*:*",
              "vulnerable": true,
              "matchCriteriaId": "779D1198-4871-421C-976D-C2F51E50A02C"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:total_security:2019-11:*:*:*:*:android:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E185AB1C-340E-4ED5-BD41-884B8A0C158A"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:total_security:2019-11:*:*:*:*:mac_os:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BBB560D-F87F-46EC-9301-2563BBC9009B"
            },
            {
              "criteria": "cpe:2.3:a:quickheal:total_security_multi-device:2019-11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A432C9C8-A36C-4DF2-8D82-0EE0E92D45E7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}