CVE-2004-2442

EPSS 10.6%

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/629unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/13263/https://exchange.xforce.ibmcloud.com/vulnerabilities/18217 http://www.ciac.org/ciac/bulletins/p-041.shtml http://www.f-secure.com/security/fsc-2004-3.shtml http://www.kb.cert.org/vuls/id/968818 http://www.securityfocus.com/bid/11732