NetSight
medium5.5

CVE-2020-9399

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive.

Impact

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.

Affected products

VendorProductAffected versions
AvastAntivirus For Linux
before 12.0
AvastAntivirus Pro
before 12.0
AvastAntivirus Pro Plus
before 12.0

Weakness classification

References