CVE-2020-9264: Medium severity ESET Cyber Security Macos vulnerability
ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ESET Smart Security Premium / Internet Security / NOD32 Antivirus / Cyber Security Pro (macOS) / Cyber Security (macOS) / Mobile Security for Android / Smart TV Security / NOD32 Antivirus 4 for Linux Desktop (ESET Archive Support Module)to a version that resolves this vulnerability.Fixed in 1296
Event History
Frequently Asked Questions
What is CVE-2020-9264?
CVE-2020-9264 is a vulnerability in ESET Archive Support Module before version 1296 that allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive.
Which software versions are affected by CVE-2020-9264?
Versions before 1296 of Eset Smart Security Premium, Internet Security, Nod32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, and Smart TV Security are affected.
What is the severity rating of CVE-2020-9264?
The severity rating of CVE-2020-9264 is medium, with a severity value of 5.5.
How can I fix CVE-2020-9264?
To fix CVE-2020-9264, update to version 1296 or later of the affected ESET software.
Where can I find more information about CVE-2020-9264?
You can find more information about CVE-2020-9264 at the following references: [Reference 1](http://seclists.org/fulldisclosure/2020/Feb/21), [Reference 2](https://blog.zoller.lu/p/tzo-11-2020-eset-generic-malformed.html), [Reference 3](https://support.eset.com/en/ca7387-modules-review-december-2019)