CVE-2020-10180
First published: Thu Mar 05 2020(Updated: )
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eset Cyber Security | <1294 | |
| Eset Cyber Security | <1294 | |
| Eset Mobile Security | <1294 | |
| Eset Nod32 Antivirus | <1294 | |
| Eset Nod32 Antivirus | =4 | |
| ESET Smart Security | <1294 | |
| ESET Smart Security | <1294 | |
| Eset Smart Tv Security | <1294 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2020-10180?
CVE-2020-10180 is a vulnerability in the ESET AV parsing engine that allows virus-detection bypass via a crafted BZ2 Checksum field in an archive.
Which versions of ESET software are affected by CVE-2020-10180?
Versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, and Smart TV Security are affected by CVE-2020-10180.
What is the severity of CVE-2020-10180?
The severity of CVE-2020-10180 is critical with a CVSS score of 9.8.
How can I fix the vulnerability described in CVE-2020-10180?
To fix the vulnerability, you should update your ESET software to version 1294 or later.
Is there any additional information available about CVE-2020-10180?
Yes, you can find more information about CVE-2020-10180 at the following reference: [https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html](https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html)
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/eset
- canonical/eset cyber security
- canonical/eset mobile security
- canonical/eset nod32 antivirus
- version/eset nod32 antivirus/4
- canonical/eset smart security
- canonical/eset smart tv security