NetSight
IP …
high7.5Public exploit code

CVE-2004-0935

Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global head…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected products

VendorProductAffected versions
Archive ZipArchive Zip
Version 1.13
BroadcomBrightstor Arcserve Backup
Version 11.1
BroadcomEtrust Antivirus
Versions 7.0, 7.1
BroadcomEtrust Antivirus Gateway
Versions 7.0, 7.1
BroadcomEtrust Ez Antivirus
Versions 6.1, 6.2, 6.3
BroadcomEtrust Ez Armor
Versions 2.0, 2.3, 2.4
BroadcomEtrust Intrusion Detection
Versions 1.4.1.13, 1.4.5, 1.5
BroadcomEtrust Secure Content Manager
Versions 1.0, 1.1
BroadcomInoculateit
Version 6.0
CaEtrust Antivirus
Version 7.0_sp2
CaEtrust Secure Content Manager
Version 1.0
Eset SoftwareNod32 Antivirus
Versions 1.0.11, 1.0.12, 1.0.13

References