CVE-2004-0937: High severity Eset Software Nod32 Antivirus vulnerability
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0937?
The severity of CVE-2004-0937 is considered to be moderate, as it allows remote attackers to bypass antivirus protection.
How do I fix CVE-2004-0937?
To fix CVE-2004-0937, update Sophos Anti-Virus to version 3.87.0 or higher.
Which versions of Sophos Anti-Virus are affected by CVE-2004-0937?
Versions of Sophos Anti-Virus prior to 3.87.0, including 3.80 to 3.86, are affected by CVE-2004-0937.
Can CVE-2004-0937 affect other antivirus software?
Yes, CVE-2004-0937 can potentially affect other antivirus software like ESET NOD32 and Kaspersky Anti-Virus, depending on the specific versions.
What is the exploit mechanism used in CVE-2004-0937?
The exploit mechanism in CVE-2004-0937 involves the use of a compressed file with both local and global headers set to zero.