CVE-2020-9320 : Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted IS

Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK. NOTE: Vendor asserts that vulnerability does not exist in product

Published 2020-02-20 22:15:12

Updated 2024-08-04 11:15:42

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2020-9320

Avira » Antivirus Server
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:antivirus_server:*:*:*:*:*:*:*:*
Matching versions
Avira » Anti-malware Sdk
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:anti-malware_sdk:*:*:*:*:*:*:*:*
Matching versions
Avira » Avira Antivirus For Endpoint
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:avira_antivirus_for_endpoint:*:*:*:*:*:*:*:*
Matching versions
Avira » Avira Antivirus For Small Business
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:avira_antivirus_for_small_business:*:*:*:*:*:*:*:*
Matching versions
Avira » Avira Exchange Security
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:avira_exchange_security:*:*:*:*:*:*:*:*
Matching versions
Avira » Avira Free Security Suite » For Windows
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:avira_free_security_suite:*:*:*:*:*:windows:*:*
Matching versions
Avira » Avira Internet Security Suite » For Windows
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:avira_internet_security_suite:*:*:*:*:*:windows:*:*
Matching versions
Avira » Avira Prime
Versions before (<) 8.3.54.138
cpe:2.3:a:avira:avira_prime:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-9320

EPSS FAQ

0.24%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 44 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-9320

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: High Availability: None

CWE ids for CVE-2020-9320

CWE-434 Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-9320

http://packetstormsecurity.com/files/156472/AVIRA-Generic-Malformed-Container-Bypass.html

AVIRA Generic Malformed Container Bypass ≈ Packet Storm
Third Party Advisory;VDB Entry
http://seclists.org/fulldisclosure/2020/Feb/31

Full Disclosure: [TZO-19-2020] - AVIRA Generic AV Bypass (ISO Container) - CVE-2020-9320
Mailing List;Third Party Advisory
https://www.zoller.lu/%5BTZO-01-2020%5D%20AVIRA%20Generic%20Bypass%20ISO.pdf
https://blog.zoller.lu/p/from-low-hanging-fruit-department-avira.html

Musings on Information Security and Data Privacy: [TZO-19-2020] - AVIRA Generic AV Bypass (ISO Container)
Third Party Advisory

Jump to

Vulnerability Details : CVE-2020-9320

Products affected by CVE-2020-9320

Exploit prediction scoring system (EPSS) score for CVE-2020-9320

CVSS scores for CVE-2020-9320

CWE ids for CVE-2020-9320

References for CVE-2020-9320