CVE-2004-2442
medium · 5Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.
5
CVSS
10.6%
EPSS (exploit prob.)
96th
EPSS percentile
2004-12-31
Published
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| f-secure | f-secure_anti-virus | 4.51 |
| f-secure | f-secure_anti-virus | 4.51 |
| f-secure | f-secure_anti-virus | 4.51 |
| f-secure | f-secure_anti-virus | 4.52 |
| f-secure | f-secure_anti-virus | 4.52 |
| f-secure | f-secure_anti-virus | 4.52 |
| f-secure | f-secure_anti-virus | 4.60 |
| f-secure | f-secure_anti-virus | 4.61 |
| f-secure | f-secure_anti-virus | 4.61 |
| f-secure | f-secure_anti-virus | 5.0 |
| f-secure | f-secure_anti-virus | 5.0 |
| f-secure | f-secure_anti-virus | 5.5 |
| f-secure | f-secure_anti-virus | 5.5 |
| f-secure | f-secure_anti-virus | 5.5 |
| f-secure | f-secure_anti-virus | 5.41 |
| f-secure | f-secure_anti-virus | 5.41 |
| f-secure | f-secure_anti-virus | 5.41 |
| f-secure | f-secure_anti-virus | 5.42 |
| f-secure | f-secure_anti-virus | 5.42 |
| f-secure | f-secure_anti-virus | 5.42 |
| f-secure | f-secure_anti-virus | 5.43 |
| f-secure | f-secure_anti-virus | 5.52 |
| f-secure | f-secure_anti-virus | 5.55 |
| f-secure | f-secure_anti-virus | 6.01 |
| f-secure | f-secure_anti-virus | 6.2 |
| f-secure | f-secure_anti-virus | 6.21 |
| f-secure | f-secure_anti-virus | 6.30 |
| f-secure | f-secure_anti-virus | 6.30_sr1 |
| f-secure | f-secure_anti-virus | 6.31 |
| f-secure | f-secure_anti-virus | 2004 |
| f-secure | f-secure_anti-virus | 2005 |
| f-secure | f-secure_for_firewalls | 6.20 |
| f-secure | f-secure_internet_security | 2004 |
| f-secure | f-secure_internet_security | 2005 |
| f-secure | f-secure_personal_express | 4.5 |
| f-secure | f-secure_personal_express | 4.6 |
| f-secure | f-secure_personal_express | 4.7 |
| f-secure | f-secure_personal_express | 5.0 |
| f-secure | internet_gatekeeper | 2.6 |
| f-secure | internet_gatekeeper | 6.3 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/13263/
- http://www.ciac.org/ciac/bulletins/p-041.shtml
- http://www.f-secure.com/security/fsc-2004-3.shtml
- http://www.kb.cert.org/vuls/id/968818
- http://www.securityfocus.com/bid/11732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18217
- http://secunia.com/advisories/13263/
- http://www.ciac.org/ciac/bulletins/p-041.shtml
- http://www.f-secure.com/security/fsc-2004-3.shtml
- http://www.kb.cert.org/vuls/id/968818
- http://www.securityfocus.com/bid/11732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18217
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2004-2442