CVEvulnerability
CVE-2004-2442
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.
Affected configurations
• f-secure f-secure anti-virus 4.51
• f-secure f-secure anti-virus 4.52
• f-secure f-secure anti-virus 4.60
• f-secure f-secure anti-virus 4.61
• f-secure f-secure anti-virus 5.0
• f-secure f-secure anti-virus 5.5
• f-secure f-secure anti-virus 5.41
• f-secure f-secure anti-virus 5.42
• f-secure f-secure anti-virus 5.43
• f-secure f-secure anti-virus 5.52
• f-secure f-secure anti-virus 5.55
• f-secure f-secure anti-virus 6.01
• f-secure f-secure anti-virus 6.2
• f-secure f-secure anti-virus 6.21
• f-secure f-secure anti-virus 6.30
• f-secure f-secure anti-virus 6.30 sr1
• f-secure f-secure anti-virus 6.31
• f-secure f-secure anti-virus 2004
• f-secure f-secure anti-virus 2005
• f-secure f-secure for firewalls 6.20
• f-secure f-secure internet security 2004
• f-secure f-secure internet security 2005
• f-secure f-secure personal express 4.5
• f-secure f-secure personal express 4.6
• f-secure f-secure personal express 4.7
• f-secure f-secure personal express 5.0
• f-secure internet gatekeeper 2.6
• f-secure internet gatekeeper 6.3
• f-secure internet gatekeeper 6.4
• f-secure internet gatekeeper 6.31
• f-secure internet gatekeeper 6.32
• f-secure internet gatekeeper 6.41
References
- http://secunia.com/advisories/13263/ Patch
- http://www.ciac.org/ciac/bulletins/p-041.shtml Vendor Advisory
- http://www.f-secure.com/security/fsc-2004-3.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/968818 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/11732 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18217 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13263/ Patch
- http://www.ciac.org/ciac/bulletins/p-041.shtml Vendor Advisory
- http://www.f-secure.com/security/fsc-2004-3.shtml Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/968818 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/11732 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18217 exchange.xforce.ibmcloud.com