CVE:CVE-2020-9264
CNNVD:CNNVD-202002-898
ESET Smart Security Premium等都是斯洛伐克ESET公司的产品。Smart Security Premium是一套杀毒软件。Internet Security是一套针对互联网安全的杀毒软件。NOD32 Antivirus是一套杀毒软件。Archive Support Module是其中的一个存档支持模块。
ESET Archive Support Module 1296之前版本中存在安全漏洞。攻击者可借助ZIP文件中的特制的Compression Information字段利用该漏洞绕过病毒检测。以下产品及版本受到影响： Smart Security Premium 1294之前版本；Internet Security 1294之前版本；NOD32 Antivirus 1294之前版本；Cyber Security Pro (macOS) 1294之前版本；Cyber Security (macOS) 1294之前版本；Mobile Security for Android 1294之前版本；Smart TV Security 1294之前版本；NOD32 Antivirus 4 for Linux Desktop 1294之前版本。
solution:Upgrade eset cyber_security to a higher version than 1296,and avoid the version (,1296); Upgrade eset internet_security to a higher version than 1296,and avoid the version (,1296); Upgrade eset mobile_security to a higher version than 1296,and avoid the version (,1296); Upgrade eset nod32_antivirus to a higher version than 1296,4,and avoid the version (,1296),4; Upgrade eset smart_security to a higher version than 1296,and avoid the version (,1296); Upgrade eset smart_tv_security to a higher version than 1296,and avoid the version (,1296)