CVE-2020-9362
published 2020-02-24CVE-2020-9362: The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home…
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.49%
70.9th percentile
The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| quickheal | antivirus_for_server | — | — |
| quickheal | antivirus_pro | — | — |
| quickheal | home_security | — | — |
| quickheal | internet_security | — | — |
| quickheal | total_security | — | — |
| quickheal | total_security_multi-device | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.htmlhttp://seclists.org/fulldisclosure/2020/Mar/14https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.htmlhttps://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.htmlhttp://packetstormsecurity.com/files/156580/QuickHeal-Generic-Malformed-Archive-Bypass.htmlhttp://seclists.org/fulldisclosure/2020/Mar/14https://blog.zoller.lu/p/from-low-hanging-fruit-department_24.htmlhttps://blog.zoller.lu/p/tzo-20-2020-quickheal-malformed-archive.html
2020-02-24
Published