CVE-2004-1096

Fixed in a distro release EPSS 18%

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Published 2004-12-01 · CVE record · OSV

Products: broadcom brightstor_arcserve_backup, broadcom etrust_antivirus, broadcom etrust_antivirus_gateway, broadcom etrust_ez_antivirus, broadcom etrust_ez_armor, broadcom etrust_intrusion_detection, broadcom etrust_secure_content_manager, broadcom inoculateit, ca etrust_antivirus, ca etrust_secure_content_manager, eset_software nod32_antivirus, kaspersky_lab kaspersky_anti-virus, mcafee antivirus_engine, rav_antivirus_desktop, rav_antivirus_for_file_servers, rav_antivirus_for_mail_servers, sophos_anti-virus, sophos_puremessage_anti-virus, sophos_small_business_suite, gentoo linux, mandrakesoft mandrake_linux, suse_linux

Distro releases