NetSight
critical9.8

CVE-2020-10180

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive.

Impact

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

Affected products

VendorProductAffected versions
EsetCyber Security
before 1294
EsetMobile Security
before 1294
EsetNod32 Antivirus
before 1294
Version 4
EsetSmart Security
before 1294
EsetSmart Tv Security
before 1294

Weakness classification

References