high7.5Public exploit code
CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not preve…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Multiple AntiVirus - '.zip' Detection Bypass2004-11-14 · local · multiple · Verified
Impact
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Archive Zip | Archive Zip | Version 1.13 |
| Broadcom | Brightstor Arcserve Backup | Version 11.1 |
| Broadcom | Etrust Antivirus | Versions 7.0, 7.1 |
| Broadcom | Etrust Antivirus Gateway | Versions 7.0, 7.1 |
| Broadcom | Etrust Ez Antivirus | Versions 6.1, 6.2, 6.3 |
| Broadcom | Etrust Ez Armor | Versions 2.0, 2.3, 2.4 |
| Broadcom | Etrust Intrusion Detection | Versions 1.4.1.13, 1.4.5, 1.5 |
| Broadcom | Etrust Secure Content Manager | Versions 1.0, 1.1 |
| Broadcom | Inoculateit | Version 6.0 |
| Ca | Etrust Antivirus | Version 7.0_sp2 |
| Ca | Etrust Secure Content Manager | Version 1.0 |
| Eset Software | Nod32 Antivirus | Versions 1.0.11, 1.0.12, 1.0.13 |
References
- NVD record
- CVE.org record
- http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/968818
- http://www.securityfocus.com/bid/11448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
- http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/968818
- http://www.securityfocus.com/bid/11448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17761