CVE-2004-2442
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2004-12-31
- Last modified
- 2024-08-08
Affected products
- F-secure Anti-virus (F-secure)
- F-secure For Firewalls (F-secure)
- F-secure Internet Security (F-secure)
- F-secure Personal Express (F-secure)
- Internet Gatekeeper (F-secure)
References
- http://secunia.com/advisories/13263/
- http://www.ciac.org/ciac/bulletins/p-041.shtml
- http://www.f-secure.com/security/fsc-2004-3.shtml
- http://www.kb.cert.org/vuls/id/968818
- http://www.securityfocus.com/bid/11732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18217
