CVE-2020-9320 | BDVDB-2026-131237 Detail

Description#

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html
https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf
http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html
http://seclists.org/fulldisclosure/2020/Feb/31

Exploit#

No public exploit known

History#

Version 12020-02-20Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.