VULNERABILITY INTELLIGENCE

CVE-2020-9264

CVSS score5.5 MEDIUM

EPSS probability1.21%

CISA KEVNot currently listed

Published2020-02-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

Weakness classification

nvd@nist.gov: CWE-436

Primary references

cve@mitre.org — Mailing List, Third Party Advisory
cve@mitre.org — Third Party Advisory
cve@mitre.org — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes