CVE-2020-9320: Malicious File Upload
First published: Thu Feb 20 2020(Updated: )
** DISPUTED ** Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Avira Anti-malware Sdk | <8.3.54.138 | |
| Avira Antivirus Server | <8.3.54.138 | |
| Avira Avira Antivirus For Endpoint | <8.3.54.138 | |
| Avira Avira Antivirus For Small Business | <8.3.54.138 | |
| Avira Avira Exchange Security | <8.3.54.138 | |
| Avira Avira Free Security Suite | <8.3.54.138 | |
| Avira Avira Internet Security Suite | <8.3.54.138 | |
| Avira Avira Prime | <8.3.54.138 | |
| <8.3.54.138 | ||
| <8.3.54.138 | ||
| <8.3.54.138 | ||
| <8.3.54.138 | ||
| <8.3.54.138 | ||
| <8.3.54.138 | ||
| <8.3.54.138 | ||
| <8.3.54.138 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html
- http://seclists.org/fulldisclosure/2020/Feb/31
- https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html
- https://www.zoller.lu/[TZO-01-2020]%20AVIRA%20Generic%20Bypass%20ISO.pdf
- https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf
Frequently Asked Questions
What is the vulnerability ID for this Avira AV Engine vulnerability?
The vulnerability ID for this Avira AV Engine vulnerability is CVE-2020-9320.
Which versions of Avira AV Engine are affected by this vulnerability?
Versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite are affected by this vulnerability.
How severe is CVE-2020-9320?
CVE-2020-9320 has a severity rating of 5.5 (medium).
How can the virus-detection bypass be achieved in this vulnerability?
The virus-detection bypass can be achieved by using a crafted ISO archive.
Is there a fix available for CVE-2020-9320?
Yes, the fix for CVE-2020-9320 is to update Avira AV Engine to version 8.3.54.138 or later.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/status
- agent/softwarecombine
- agent/description
- agent/event
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- status/disputed
- vendor/avira
- canonical/avira anti-malware sdk
- canonical/avira antivirus server
- canonical/avira avira antivirus for endpoint
- canonical/avira avira antivirus for small business
- canonical/avira avira exchange security
- canonical/avira avira free security suite
- canonical/avira avira internet security suite
- canonical/avira avira prime