CVE-2020-9362
The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.
Published:Feb 24, 2020
Last Modified:Nov 21, 2024
EPS:Feb 24, 2020
EPSS Score:0.00213
CVSS Score:7.8
Affected Products
Vendor
Product
Action
Vendor
Quickheal
Product
Antivirus For Server
Quickheal
Antivirus For Server
Vendor
Quickheal
Product
Antivirus Pro
Quickheal
Antivirus Pro
Vendor
Quickheal
Product
Home Security
Quickheal
Home Security
Vendor
Quickheal
Product
Internet Security
Quickheal
Internet Security
Vendor
Quickheal
Product
Total Security
Quickheal
Total Security
Vendor
Quickheal
Product
Total Security Multi-device
Quickheal
Total Security Multi-device
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
