CVE-2004-0932
High
Description
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Mcafee Antivirus Engine
PublishedJan 27, 2005
First seenJan 27, 2005
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee antivirus_engine | 4.3.20 | — |
| archive_zip archive_zip | 1.13 | — |
| broadcom brightstor_arcserve_backup | 11.1 | — |
| broadcom etrust_antivirus | 7.0, 7.1 | — |
| broadcom etrust_antivirus_gateway | 7.0, 7.1 | — |
| broadcom etrust_ez_antivirus | 6.1, 6.2, 6.3 | — |
| broadcom etrust_ez_armor | 2.0, 2.3, 2.4 | — |
| broadcom etrust_intrusion_detection | 1.4.1.13, 1.4.5, 1.5 | — |
| broadcom etrust_secure_content_manager | 1.0, 1.1 | — |
| broadcom inoculateit | 6.0 | — |
| ca etrust_antivirus | 7.0_sp2 | — |
| ca etrust_secure_content_manager | 1.0 | — |
| eset_software nod32_antivirus | 1.0.11, 1.0.12, 1.0.13 | — |
| kaspersky_lab kaspersky_anti-virus | 3.0, 4.0, 5.0 | — |
| rav_antivirus rav_antivirus_desktop | 8.6 | — |
| rav_antivirus rav_antivirus_for_file_servers | 1.0 | — |
| rav_antivirus rav_antivirus_for_mail_servers | 8.4.2 | — |
| sophos sophos_anti-virus | 3.4.6, 3.78, 3.78d, 3.79, 3.80, 3.81, 3.82, 3.83, 3.84, 3.85, 3.86 | — |
| sophos sophos_puremessage_anti-virus | 4.6 | — |
| sophos sophos_small_business_suite | 1.0 | — |
| gentoo linux | No range specified, 1.4 | — |
| mandrakesoft mandrake_linux | 10.1 | — |
| suse suse_linux | 9.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.