CVE:CVE-2020-9320
CNNVD:CNNVD-202002-1042
Avira AV Engine是Avira公司的一款病毒扫描引擎。
Avira AV Engine 8.3.54.138之前版本中存在代码问题漏洞。攻击者可借助特制的ISO文件利用该漏洞绕过病毒检测。以下产品及版本受到影响：Antivirus for Endpoint；Antivirus for Small Business；Exchange Security (Gateway)；Internet Security Suite for Windows；Antivirus Prime；Antivirus Free Security Suite for Windows；Cross Platform Anti-malware SDK。
solution:Upgrade avira anti-malware_sdk to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira antivirus_server to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira avira_antivirus_for_endpoint to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira avira_antivirus_for_small_business to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira avira_exchange_security to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira avira_free_security_suite to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira avira_internet_security_suite to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138); Upgrade avira avira_prime to a higher version than 8.3.54.138,and avoid the version (,8.3.54.138)