Bypass in ESET Antivirus Products Due to Malicious Archive Manipulation
CVE-2020-10180

9.8CRITICAL

Key Information:

Vendor

Eset

Status
Nod32 Antivirus
Smart Security
Mobile Security
Smart Tv Security
Vendor
CVE Published:
5 March 2020

What is CVE-2020-10180?

The ESET antivirus parsing engine is susceptible to a vulnerability that allows attackers to bypass virus detection mechanisms. This is achieved by manipulating the BZ2 Checksum field within crafted archive files. This flaw impacts a range of ESET products, making them vulnerable if operating on versions prior to 1294. As a result, malicious entities could potentially execute payloads undetected, thereby compromising system security.

References

https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malform...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.