← Back

CVE-2020-9362

nvd nist
Published: Feb 24, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Multi-Device, Internet Security, Total Security for Mac, AntiVirus Pro, AntiVirus for Server, and Total Security for Android.

Affected (8)

Quickheal
6 products
Antivirus For Server
Antivirus Pro
Home Security
Internet Security
Total Security
Total Security Multi Device
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Antivirus For Server
Version 2019-11
Antivirus Pro
Version 2019-11
Home Security
Version 2019-11
Internet Security
Version 2019-11
Quickheal
Total Security
Version 2019-11
Total Security
Version 2019-11
Total Security
Version 2019-11
Total Security Multi Device
Version 2019-11

Related CWEs

CWE-436
Interpretation Conflict
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.

References (8)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.