CVE-2004-0932

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-01-27

Last modified

2024-08-08

Affected products

• Archive Zip (Archive Zip)
• Brightstor Arcserve Backup (Broadcom)
• Etrust Antivirus (Broadcom)
• Etrust Antivirus Gateway (Broadcom)
• Etrust Ez Antivirus (Broadcom)
• Etrust Ez Armor (Broadcom)
• Etrust Intrusion Detection (Broadcom)
• Etrust Secure Content Manager (Broadcom)
• Inoculateit (Broadcom)
• Etrust Antivirus (Ca)
• Etrust Secure Content Manager (Ca)
• Nod32 Antivirus (Eset Software)
• Linux (Gentoo)
• Kaspersky Anti-virus (Kaspersky Lab)
• Mandrake Linux (Mandrakesoft)
• Antivirus Engine (Mcafee)
• Rav Antivirus Desktop (Rav Antivirus)
• Rav Antivirus For File Servers (Rav Antivirus)
• Rav Antivirus For Mail Servers (Rav Antivirus)
• Sophos Anti-virus (Sophos)
• Sophos Puremessage Anti-virus (Sophos)
• Sophos Small Business Suite (Sophos)
• Suse Linux (Suse)

References

• http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
• http://www.securityfocus.com/bid/11448
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17761