CVEvulnerability

CVE-2004-1096

7.5 HIGH Published 2005-01-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected configurations

• broadcom brightstor arcserve backup 11.1 • broadcom etrust antivirus 7.0 • broadcom etrust antivirus 7.1 • broadcom etrust antivirus gateway 7.0 • broadcom etrust antivirus gateway 7.1 • broadcom etrust ez antivirus 6.1 • broadcom etrust ez antivirus 6.2 • broadcom etrust ez antivirus 6.3 • broadcom etrust ez armor 2.0 • broadcom etrust ez armor 2.3 • broadcom etrust ez armor 2.4 • broadcom etrust intrusion detection 1.4.1.13 • broadcom etrust intrusion detection 1.4.5 • broadcom etrust intrusion detection 1.5 • broadcom etrust secure content manager 1.0 • broadcom etrust secure content manager 1.1 • broadcom inoculateit 6.0 • ca etrust antivirus 7.0 sp2 • ca etrust secure content manager 1.0 • eset software nod32 antivirus 1.0.11 • eset software nod32 antivirus 1.0.12 • eset software nod32 antivirus 1.0.13 • kaspersky lab kaspersky anti-virus 3.0 • kaspersky lab kaspersky anti-virus 4.0 • kaspersky lab kaspersky anti-virus 5.0 • mcafee antivirus engine 4.3.20 • rav antivirus rav antivirus desktop 8.6 • rav antivirus rav antivirus for file servers 1.0 • rav antivirus rav antivirus for mail servers 8.4.2 • sophos sophos anti-virus 3.4.6 • sophos sophos anti-virus 3.78 • sophos sophos anti-virus 3.78d • sophos sophos anti-virus 3.79 • sophos sophos anti-virus 3.80 • sophos sophos anti-virus 3.81 • sophos sophos anti-virus 3.82 • sophos sophos anti-virus 3.83 • sophos sophos anti-virus 3.84 • sophos sophos anti-virus 3.85 • sophos sophos anti-virus 3.86 • sophos sophos puremessage anti-virus 4.6 • sophos sophos small business suite 1.0 • gentoo linux • gentoo linux 1.4 • mandrakesoft mandrake linux 10.1 • suse suse linux 9.2

References