NOD32 Antivirus Zip Archive Virus Detection Bypass Vulnerability

Description:
A vulnerability has been reported in NOD32 Antivirus, which can be exploited by malware to bypass certain scanning functionality.

The vulnerability is caused due to an error when parsing .zip archive headers and can be exploited via a specially crafted .zip archive where the uncompressed size of the archived file has been modified within the local and global headers.

Successful exploitation causes malware in a specially crafted .zip archive to pass the scanning functionality undetected.

NOTE: This is not a critical issue on client systems, as the malware still is detected upon execution.

Solution:
The vendor reports that the vulnerability has been fixed in the archive-support module version 1.020, which is available via Automatic Virus-Signatures Update.

 

This was already mentioned in this thread;

https://www.wilderssecurity.com/showthread.php?t=51557

 

Oop sorry i missed it. All my apologies.

 

That's ok, would rather have it posted twice, than not at all

Cheers