PT-2020-11966 · Eset · Eset Nod32 Antivirus+6

Published 2020-03-06 · Updated 2021-07-21 · CVE-2020-10193

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ESET Smart Security Premium versions prior to 1294 ESET Internet Security versions prior to 1294 ESET NOD32 Antivirus versions prior to 1294 ESET Cyber Security Pro (macOS) versions prior to 1294 ESET Cyber Security (macOS) versions prior to 1294 ESET Mobile Security for Android versions prior to 1294 ESET Smart TV Security versions prior to 1294 ESET NOD32 Antivirus 4 for Linux Desktop versions prior to 1294

Description The issue allows virus-detection bypass via crafted RAR Compression Information in an archive.

Recommendations For ESET Smart Security Premium versions prior to 1294, update to version 1294 or later. For ESET Internet Security versions prior to 1294, update to version 1294 or later. For ESET NOD32 Antivirus versions prior to 1294, update to version 1294 or later. For ESET Cyber Security Pro (macOS) versions prior to 1294, update to version 1294 or later. For ESET Cyber Security (macOS) versions prior to 1294, update to version 1294 or later. For ESET Mobile Security for Android versions prior to 1294, update to version 1294 or later. For ESET Smart TV Security versions prior to 1294, update to version 1294 or later. For ESET NOD32 Antivirus 4 for Linux Desktop versions prior to 1294, update to version 1294 or later.

Fix

Weakness Enumeration

CWE-436

Related Identifiers

CVE-2020-10193

Affected Products

Eset Cyber Security

Eset Internet Security

Eset Mobile Security For Android

Eset Nod32 Antivirus

Eset Nod32 Antivirus 4 For Linux Desktop

Eset Smart Security Premium

Eset Smart Security

References · 3

• https://osv.dev/vulnerability/CVE-2020-10193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10193 · Security Note
• https://blog.zoller.lu/p/from-low-hanging-fruit-department_13.html · Note