CVEvulnerability

CVE-2004-2442

5.0 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.

Affected configurations

• f-secure f-secure anti-virus 4.51 • f-secure f-secure anti-virus 4.52 • f-secure f-secure anti-virus 4.60 • f-secure f-secure anti-virus 4.61 • f-secure f-secure anti-virus 5.0 • f-secure f-secure anti-virus 5.5 • f-secure f-secure anti-virus 5.41 • f-secure f-secure anti-virus 5.42 • f-secure f-secure anti-virus 5.43 • f-secure f-secure anti-virus 5.52 • f-secure f-secure anti-virus 5.55 • f-secure f-secure anti-virus 6.01 • f-secure f-secure anti-virus 6.2 • f-secure f-secure anti-virus 6.21 • f-secure f-secure anti-virus 6.30 • f-secure f-secure anti-virus 6.30 sr1 • f-secure f-secure anti-virus 6.31 • f-secure f-secure anti-virus 2004 • f-secure f-secure anti-virus 2005 • f-secure f-secure for firewalls 6.20 • f-secure f-secure internet security 2004 • f-secure f-secure internet security 2005 • f-secure f-secure personal express 4.5 • f-secure f-secure personal express 4.6 • f-secure f-secure personal express 4.7 • f-secure f-secure personal express 5.0 • f-secure internet gatekeeper 2.6 • f-secure internet gatekeeper 6.3 • f-secure internet gatekeeper 6.4 • f-secure internet gatekeeper 6.31 • f-secure internet gatekeeper 6.32 • f-secure internet gatekeeper 6.41

References