CVE-2004-0937
No CVSS score yet. EPSS 15% chance of exploitation in the next 30 days.
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
- EPSS
- 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- archive_zip:archive_zip
- broadcom:brightstor_arcserve_backup
- broadcom:etrust_antivirus
- broadcom:etrust_antivirus_gateway
- broadcom:etrust_ez_antivirus
- broadcom:etrust_ez_armor
- broadcom:etrust_intrusion_detection
- broadcom:etrust_secure_content_manager
- broadcom:inoculateit
- ca:etrust_antivirus
- ca:etrust_secure_content_manager
- eset_software:nod32_antivirus
- gentoo:linux
- kaspersky_lab:kaspersky_anti-virus
- mandrakesoft:mandrake_linux
- mcafee:antivirus_engine
- rav_antivirus:rav_antivirus_desktop
- rav_antivirus:rav_antivirus_for_file_servers
- rav_antivirus:rav_antivirus_for_mail_servers
- sophos:sophos_anti-virus
- sophos:sophos_puremessage_anti-virus
- sophos:sophos_small_business_suite
- suse:suse_linux
References
- http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
- http://www.kb.cert.org/vuls/id/968818
- http://www.securityfocus.com/bid/11448
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
- http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true