VulnerabilityModified

CVE-2004-2442

MEDIUM 5.0EPSS 10.6%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 10.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS: 10.64% probability · 96th percentile
CISA KEV: Not listed
Affected: f-secure/f-secure anti-virus · f-secure/f-secure for firewalls · f-secure/f-secure internet security · f-secure/f-secure personal express · f-secure/internet gatekeeper
Source: cve@mitre.org

References

http://secunia.com/advisories/13263/Patch
http://www.ciac.org/ciac/bulletins/p-041.shtmlVendor Advisory
http://www.f-secure.com/security/fsc-2004-3.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/968818Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11732Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18217
http://secunia.com/advisories/13263/Patch
http://www.ciac.org/ciac/bulletins/p-041.shtmlVendor Advisory
http://www.f-secure.com/security/fsc-2004-3.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/968818Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/11732Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18217

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.