CVE-2004-0934: High severity Archive Zip Archive Zip vulnerability

Published Nov 19, 2004

Updated

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected Software

48 affected components

Archive Zip Archive Zip=1.13

Broadcom Brightstor Arcserve Backup=11.1

Broadcom Etrust Antivirus=7.0

Broadcom Etrust Antivirus=7.1

Broadcom Etrust Antivirus Gateway=7.0

Broadcom Etrust Antivirus Gateway=7.1

Broadcom Etrust Ez Antivirus=6.1

Broadcom Etrust Ez Antivirus=6.2

Broadcom Etrust Ez Antivirus=6.3

Broadcom Etrust Ez Armor=2.0

Broadcom Etrust Ez Armor=2.3

Broadcom Etrust Ez Armor=2.4

Broadcom Etrust Intrusion Detection=1.4.1.13

Broadcom Etrust Intrusion Detection=1.4.5

Broadcom Etrust Intrusion Detection=1.5

Broadcom Etrust Secure Content Manager=1.0

Broadcom Etrust Secure Content Manager=1.1

Broadcom Inoculateit=6.0

CA eTrust Antivirus=7.0_sp2

CA eTrust Secure Content Manager=1.0-sp1

Eset Software Nod32 Antivirus=1.0.11

Eset Software Nod32 Antivirus=1.0.12

Eset Software Nod32 Antivirus=1.0.13

Kaspersky Lab Kaspersky Anti-virus=3.0

Kaspersky Lab Kaspersky Anti-virus=4.0

Kaspersky Lab Kaspersky Anti-virus=5.0

McAfee Antivirus Engine=4.3.20

RAV antivirus Rav Antivirus Desktop=8.6

RAV antivirus Rav Antivirus For File Servers=1.0

RAV antivirus Rav Antivirus For Mail Servers=8.4.2

Sophos Sophos Anti-Virus=3.4.6

Sophos Sophos Anti-Virus=3.78

Sophos Sophos Anti-Virus=3.78d

Sophos Sophos Anti-Virus=3.79

Sophos Sophos Anti-Virus=3.80

Sophos Sophos Anti-Virus=3.81

Sophos Sophos Anti-Virus=3.82

Sophos Sophos Anti-Virus=3.83

Sophos Sophos Anti-Virus=3.84

Sophos Sophos Anti-Virus=3.85

Sophos Sophos Anti-Virus=3.86

Sophos Sophos Puremessage Anti-virus=4.6

Sophos Sophos Small Business Suite=1.0

Gentoo Linux

Gentoo Linux=1.4

Mandrakesoft Mandrake Linux=10.1

SUSE SuSE Linux=9.2

Remediation

Patch Available

http://www.securityfocus.com/bid/11448

Event History

Nov 19, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0934?

CVE-2004-0934 is classified as a medium severity vulnerability due to its potential to bypass antivirus protections.

How can I mitigate CVE-2004-0934?

To mitigate CVE-2004-0934, it's recommended to upgrade to the latest version of the affected antivirus software that provides patches against this vulnerability.

Which software versions are affected by CVE-2004-0934?

CVE-2004-0934 affects Kaspersky Anti-Virus versions 3.x to 4.x, along with other antivirus software listed in the vulnerability details.

What is the nature of the vulnerability described in CVE-2004-0934?

CVE-2004-0934 allows remote attackers to bypass antivirus protection through a specific method involving compressed files.

Are there any known exploits for CVE-2004-0934?

Yes, there are known exploitation methods for CVE-2004-0934 that leverage the vulnerability's characteristics to evade detection by antivirus software.