Multiple Vendor Antivirus applications are reported vulnerable to a zip file detection evasion vulnerability. This vulnerability may allow maliciously crafted zip files to avoid being scanned and detected. A remote attacker can craft a malicious zip archive and send it a vulnerable user. The malicious archive can bypass the protection provided by a vulnerable antivirus program, giving users a false sense of security. If the user opens and executes the file, this attack can result in a malicious code infection. I've noticed that "Gentoo" is in the list ov vulnerable systems. Reproducible: Always Steps to Reproduce: 1. 2. 3.
Sorry, my mistake. Didn't notice the GLSA on that.
