A vulnerability has been reported in NOD32 Antivirus, which can be exploited by malware to bypass certain scanning functionality.

The vulnerability is caused due to an error when parsing .zip archive headers and can be exploited via a specially crafted .zip archive where the uncompressed size of the archived file has been modified within the local and global headers.

Successful exploitation causes malware in a specially crafted .zip archive to pass the scanning functionality undetected.

NOTE: This is not a critical issue on client systems, as the malware still is detected upon execution.

Solution
The vendor reports that the vulnerability has been fixed in the archive-support module version 1.020, which is available via Automatic Virus-Signatures Update.

Provided and/or discovered by
Discovered by anonymous person and reported via iDEFENSE.

Original Advisory
http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities

Deep Links
Links available in Customer Area