[TZO-19-2020] - AVIRA Generic AV Bypass (ISO Container) - CVE-2020-9320
Thierry Zoller <[email protected]> Fri, 21 Feb 2020 09:31:09 +0100
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <[email protected]> |
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCgogICAgICAgICAgICAgICAgIEZyb20gdGhlIGxvdy1oYW5naW5nLWZy dWl0LWRlcGFydG1lbnQKICAgICAgQVZJUkEgR2VuZXJpYyBNYWxmb3JtZWQgQ29udGFpbmVyIGJ5 cGFzcyAoSVNPIENvbnRhaW5lcikKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCgpSZWxlYXNlIG1vZGUgICAgOiBD b29yZGluYXRlZCBkaXNjbG9zdXJlIC8gVmVuZG9yIGRvZXMgbm90IGRpc2Nsb3NlCkNWRSAgICAg ICAgICAgICA6IENWRS0yMDIwLTkzMjAKUmVmICAgICAgICAgICAgIDogW1RaTy0xOS0yMDIwXSAt IEFWSVJBIEdlbmVyaWMgQVYgQnlwYXNzIChJU08gQ29udGFpbmVyKQpWZW5kb3IgICAgICAgICAg OiBBVklSQQpTdGF0dXMgICAgICAgICAgOiBQQVRDSEVEIC0gRW5naW5lIHZlcnNpb24gOC4zLjU0 LjEzOC4KQ1ZFICAgICAgICAgICAgIDogbm9uZSBwcm92aWRlZCwKQmxvZyAgICAgICAgICAgIDog Cmh0dHBzOi8vYmxvZy56b2xsZXIubHUvcC9mcm9tLWxvdy1oYW5naW5nLWZydWl0LWRlcGFydG1l bnQtYXZpcmEuaHRtbApWdWxuZXJhYmlsaXR5IERpc2xvc3VyZSBQb2xpY3k6IGh0dHBzOi8vY2Fy YXZlbGFocS5jb20vYi9wb2xpY3kvMjA5NDkKCkFmZmVjdGVkIFByb2R1Y3RzCj09PT09PT09PT09 PT09PT09CkFWIEVuZ2luZSBiZWxvdyA4LjMuNTQuMTM4CgpBbGwgQXZpcmEgcHJvZHVjdHMgOgot IEF2aXJhIEFudGl2aXJ1cyBTZXJ2ZXIKLSBBdmlyYSBBbnRpdmlydXMgZm9yIEVuZHBvaW50Ci0g QXZpcmEgQW50aXZpcnVzIGZvciBTbWFsbCBCdXNpbmVzcwotIEF2aXJhIEV4Y2hhbmdlIFNlY3Vy aXR5IChHYXRld2F5KQotIEF2aXJhIEludGVybmV0IFNlY3VyaXR5IFN1aXRlIGZvciBXaW5kb3dz Ci0gQXZpcmEgUHJpbWUKLSBBdmlyYSBGcmVlIFNlY3VyaXR5IFN1aXRlIGZvciBXaW5kb3dzCi0g Q3Jvc3MgUGxhdGZvcm0gQW50aS1tYWx3YXJlIFNESwoKQXR0ZW50aW9uOgpBdmlyYSBkb2VzIG5v dCBwYXRjaCBvciB1cGRhdGUgdGhlaXIgdmVyeSBwb3B1bGFyIGNvbW1hbmQgbGluZSBzY2FubmVy IAp0aGF0IGlzIHN0aWxsIGF2YWlsYWJsZSBmb3IgZG93bmxvYWQgb24gdGhlaXIgd2Vic2l0ZS4g U2luY2UgQXZpcmEgZG9lcyAKbm90IHJlbGVhc2UgYW5kIGFkdmlzb3J5IHRoZWlyIGN1c3RvbWVy cyBhcmUgbm9uZSB0aGUgd2lzZXIuCgpBdmlyYSBsaWNlbnNlcyBpdCdzIGVuZ2luZSB0byBtYW55 IE9FTSBQYXJ0bmVycy4gVGhlIE9FTSBQYXJ0bmVycyB0aGF0IAp1c2UgdGhlIEF2aXJhIEVuZ2lu ZSBtYXkgYmUgdnVsbmVyYWJsZSBvciBub3QuIEkgd291bGQgYWR2aXNlIHRoYXQgeW91IApyZWFj aCBvdXQgdG8gdGhlIHZlbmRvcnMgbGlzdGVkIGJlbG93IHRvIGtub3cgd2hldGhlciB5b3UgYXJl IGFmZmVjdGVkIApvciBub3QuIE9FTSBQYXJ0bmVycwpjYW4gcmVhY2ggb3V0IHRvIG1lIHRvIHJl dHJlaXZlIHRoZSBQT0MgaW4gb3JkZXIgdG8gdGVzdC4KCkFWSVJBIE9FTSBQYXJ0bmVyczoKLSBG LVNlY3VyZQotIFNvcGhvcwotIEJhcnJhY3VkZQotIEFsaWJhYmEgQ2xvdWQgU2VjdXJpdHkKLSBD aGVjayBQb2ludAotIENVSk8gQUkKLSBUUC1MaW5rCi0gRnVqaVNvZnQKLSBBV1MKLSBSb2hkZSBh bmQgU2Nod2FyegotIENhcmVlcmJ1aWxkZXIKLSBIdWF3ZWkKLSBEcmFjb29uCi0gVG90YWwgQXZh aWxhYmlsaXR5Ci0gRml4TWVTdGljawotIEFQUFZJU09SWQotIFRhYmlkdXMKLSBDeXJlbgoKClNv dXJjZSA6Cmh0dHBzOi8vb2VtLmF2aXJhLmNvbS9lbi9wYXJ0bmVyc2hpcC9vdXItcGFydG5lcnMK CgpJLiBCYWNrZ3JvdW5kCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KUXVvdGU6ICJXZSBw cm90ZWN0IHBlb3BsZeKAlGxpa2UgeW914oCUYWNyb3NzIGFsbCBkZXZpY2VzLCBib3RoIGRpcmVj dGx5IGFuZCAKdmlhIG91ciBPRU0gcGFydG5lcnNoaXBzLldlIHByb3ZpZGUgYSB3aWRlIHZhcmll dHkgb2YgYmVzdC1pbi1jbGFzcyAKc29sdXRpb25zIHRvIGVuaGFuY2UgeW91ciBwcm90ZWN0aW9u LCBwZXJmb3JtYW5jZSwKYW5kIG9ubGluZSBwcml2YWN54oCUcmFuZ2luZyBmcm9tIGFudGl2aXJ1 cyB0byBWUE4gYW5kIGNsZWFudXAgdGVjaG5vbG9naWVzLgoKQSBzZXJ2ZXIgc2VjdXJpdHkgc2hv dWxkIGdldCBzcGVjaWFsIGF0dGVudGlvbiwgYXMgYSBzaW5nbGUgZW1wbG95ZWUgCm1pZ2h0IHN0 b3JlIGEgbWFsaWNpb3VzIGZpbGUgb24gdGhlIG5ldHdvcmsgYW5kIGluc3RhbnRseSBjYXVzZSBh IApjYXNjYWRpbmcgZGFtYWdlIGFjcm9zcyB0aGUgZW50aXJlIG9yZ2FuaXphdGlvbi4KV2l0aCBB dmlyYSdzIHNvbHV0aW9ucyBmb3Igc2VydmVyIHNlY3VyaXR5IHlvdSBjYW4gcHJldmVudCBzdWNo IApzY2VuYXJpb3MgYnkgcHJvdGVjdGluZyB5b3VyIG5ldHdvcmssIGRhdGEsIGFuZCB3ZWIgdHJh ZmZpYy4gIgoKQXZpcmEgaGFzIHRoZSBUcnVzdCBTZWFsIG9yIHRoZQpodHRwOi8vd3d3LnRlbGV0 cnVzdC5kZS9pdHNtaWcvCgoKSUkuIERlc2NyaXB0aW9uCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0KVGhlIHBhcnNpbmcgZW5naW5lIHN1cHBvcnRzIHRoZSBJU08gY29udGFpbmVyIGZvcm1h dC4gVGhlIHBhcnNpbmcgZW5naW5lIApjYW4gYmUgYnlwYXNzZWQgIGJ5IHNwZWNpZmljYWxseSBt YW5pcHVsYXRpbmcgdGhlIElTTyBBcmNoaXZlClRoaXMgbGVhZHMgdG8gdGhlIEVuZHBvaW50IGln bm9yaW5nIHRoZSBjb250YWluZXIgYW5kIHRoZSBHYXRld2F5cyB0byAKbGV0IHRoaXMgZmlsZSBz bGlwIHRocm91Z2ggdW5pbnNwZWN0ZWQuCgoKSUlJLiBJbXBhY3QKLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQpJdCBieXBhc3NlcyBBdmlyYSBwZXJpbWV0ZXIgZGVmZW5zZXMgYW5kIHNoZWR1 bGVkIEFWIHNjYW5zLgoKSW1wYWN0cyBkZXBlbmRzIG9uIHRoZSBjb250ZXh0dWFsIHVzZSBvZiB0 aGUgcHJvZHVjdCBhbmQgZW5naW5lIHdpdGhpbiAKdGhlIG9yZ2FuaXNhdGlvbgpvZiBhIGN1c3Rv bWVyLiBHYXRld2F5IFByb2R1Y3RzIChFbWFpbCwgSFRUUCBQcm94eSBldGMpIG1heSBhbGxvdyB0 aGUgCmZpbGUgdGhyb3VnaCB1bnNjYW5uZWQKYW5kIGdpdmUgaXQgYSBjbGVhbiBiaWxsIG9mIGhl YWx0aC4gU2VydmVyIHNpZGUgQVYgc29mdHdhcmUgd2lsbCBub3QgYmUgCmFibGUgdG8gZGlzY292 ZXIKYW55IGNvZGUgb3Igc2FtcGxlIGNvbnRhaW5lZCB3aXRoaW4gdGhpcyBJU08gZmlsZSBhbmQg aXQgd2lsbCBub3QgcmFpc2UgCnN1c3BpY2lvbiBldmVuCmlmIHlvdSBrbm93IGV4YWN0bHkgd2hh dCB5b3UgYXJlIGxvb2tpbmcgZm9yIChXaGljaCBpcyBmb3IgZXhhbXBsZSBncmVhdCAKdG8gaGlk ZSB5b3VyIGltcGxhbnRzCm9yIEV4ZmlsdHJhdGlvbi9QaXZvdCBTZXJ2ZXIpLgoKVGhlcmUgaXMg YSBsb3QgbW9yZSB0byBiZSBzYWlkIGFib3V0IHRoaXMgYnVnIGNsYXNzLCBzbyByYXRoZXIgdGhh biBib3JlIAp5b3Ugd2l0aCBpdCBpbgp0aGlzIGFkdmlzb3J5IEkgcHJvdmlkZSBhIGxpbmsgdG8g bXkgMjAwOSBibG9nIHBvc3QKaHR0cDovL2Jsb2cuem9sbGVyLmx1LzIwMDkvMDQvY2FzZS1mb3It YXYtYnlwYXNzZXNldmFzaW9ucy5odG1sCgpJVi4gUGF0Y2ggLyBBZHZpc29yeQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tClBBVENIRUQgLSBFbmdpbmUgdmVyc2lvbiA4LjMuNTQuMTM4LgoK Vi4gRGlzY2xvc3VyZSB0aW1lbGluZQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCgpIb3cg QXZpcmEgaGFuZGxlZCB0aGVzZSByZXBvcnRzIGluIDIwMDkgOgpodHRwczovL2Jsb2cuem9sbGVy Lmx1LzIwMDkvMDQvYXZpcmEtYW50aXZpci1nZW5lcmljLWNhYi1ieXBhc3MuaHRtbAoKMjggTk9W IDIwMTkKU3VibWl0dGVkIHRoZSBWdWxuZXJhYmlsdGl5IERldGFpbHMKCjA0IERFQyAyMDE5CkFW SVJBIHJlbGVhc2VzIGEgcGF0Y2ggYnV0IGRvZXNuJ3QgaW5mb3JtIHRoZSBwdWJsaWMgYW5kL29y IGN1c3RvbWVycy4KCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXwpTZW50IHRocm91Z2ggdGhlIEZ1bGwgRGlzY2xvc3VyZSBtYWlsaW5nIGxpc3QKaHR0cHM6 Ly9ubWFwLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Z1bGxkaXNjbG9zdXJlCldlYiBBcmNoaXZlcyAm IFJTUzogaHR0cDovL3NlY2xpc3RzLm9yZy9mdWxsZGlzY2xvc3VyZS8=