Unscored severity · published Dec 31, 2004
CVE-2004-2442
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier,…
–
CVSS
10.6%
EPSS
No
On KEV
Description
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
F-secure Anti-virus · F-secure
4.51; 4.51; 4.51; 4.52; 4.52; 4.52; +25 more · source: NVD
FF
F-secure For Firewalls · F-secure
6.20 · source: NVD
FI
F-secure Internet Security · F-secure
2004; 2005 · source: NVD
FP
F-secure Personal Express · F-secure
4.5; 4.6; 4.7; 5.0 · source: NVD
IG
Internet Gatekeeper · F-secure
2.6; 6.3; 6.4; 6.31; 6.32; 6.41 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2442
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2442
Patch
http://secunia.com/advisories/13263/
Vendor Advisory
http://www.ciac.org/ciac/bulletins/p-041.shtml
Patch
http://www.f-secure.com/security/fsc-2004-3.shtml
Third Party Advisory
http://www.kb.cert.org/vuls/id/968818
Patch
http://www.securityfocus.com/bid/11732
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18217
More from F-secure Anti-virus
–
CVE-2012-1463
The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, Comodo Antivirus 7424, eSafe…
–
CVE-2012-1461
The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Secure Anti-Virus 9.0.16160.0, Fortinet Antivirus…
–
CVE-2012-1459
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus…
–
CVE-2012-1443
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint…
–
CVE-2012-1442
The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, McAfee Gateway (formerly Webwasher) 2010.1C, eSafe 7.0.17.0, Kaspersky…