CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-9399 – AVAST Generic Archive Bypass
https://notcve.org/view.php?id=CVE-2020-9399
26 Feb 2020 — The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. El motor de análisis de Avast AV permite la detección de virus por medio de un archivo ZIP diseñado. Esto afecta a las versiones anteriores a 12 definiciones de 200114-0 de Antivirus Pro, Antivirus Pro Plus y Antivirus para Linux. The AVAST parsing engine supports the ZIP archive format. • https://blog.zoller.lu/p/tzo-23-2020-avast-generic-archive.html • CWE-436: Interpretation Conflict •
CVSS: 5.5EPSS: 0%CPEs: 42EXPL: 0CVE-2016-4025 – Avast! Sandbox Escape
https://notcve.org/view.php?id=CVE-2016-4025
19 Apr 2016 — Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call. Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security ... • https://labs.nettitude.com/blog/escaping-avast-sandbox-using-single-ioctl-cve-2016-4025 • CWE-254: 7PK - Security Features •