CVE-2020-9399

2020-02-2813:58:46

mitre

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.6%

JSON

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux.

References

blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html

seclists.org/fulldisclosure/2020/Feb/35