CVE-2020-9264: ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions…

PriorityP423medium5.5CVSS 3.1

AVLACLPRNUIRSUCNIHAN

EPSS

1.18%

63.8th percentile

ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
eset	cyber_security	< 1296	1296
eset	internet_security	< 1296	1296
eset	mobile_security	< 1296	1296
eset	nod32_antivirus	< 1296	1296
eset	nod32_antivirus	—	—
eset	smart_security	< 1296	1296
eset	smart_tv_security	< 1296	1296

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.