CVE-2020-10180

The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive

published March 5, 2020

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

⚠️ A crafty BZ2 checksum is the ticket to bypassing virus detection! This sneaky vulnerability could allow malicious files to slip through unnoticed in ESET's antivirus products. 🔥 Think of it like a restaurant that accepts special recipe cards without verifying the ingredients—if the chef never checks what goes into the dish, dangerous items could end up on the menu! An attacker could create a malicious archive that appears safe, effectively slipping past the antivirus checks. This could lead to the execution of harmful software on users' systems, potentially compromising their security and data integrity.

Put simply

Think of it like a restaurant that accepts special recipe cards without verifying the ingredients—if the chef never checks what goes into the dish, dangerous items could end up on the menu! CVE-2020-10180 allows virus detection to be bypassed by manipulating the BZ2 Checksum field in an archive file. This flaw affects several ESET antivirus products, enabling crafted archives to go undetected.

What to do

An attacker could create a malicious archive that appears safe, effectively slipping past the antivirus checks. This could lead to the execution of harmful software on users' systems, potentially compromising their security and data integrity. Update affected ESET antivirus products to version 1294 or later immediately. Ensure regular updates are applied to maintain optimal security and avoid vulnerabilities. Consider implementing additional security measures to monitor for unusual file activity. You've got this! With a simple update, you'll ensure your defenses are strong and your systems are safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01690 · 76.9th percentile
Published
2020-03-05T18:44Z
EPSS history
Timeline
  • 05 MAR 18:44Z
    The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive
    cvelistv5