Back to Database
Status published
High
CVE-2004-0937
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95,...
Vulnerability Description
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0937
Credits & Attribution
No credits recorded in the NVD database.
References
More from archive zip
View All →CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via...
High
7.5
CVE-2004-0935
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers...
High
7.5
CVE-2004-0934
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus...
High
7.5
CVE-2004-0933
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1,...
High
7.5
CVE-2004-0932
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct...
High
7.5
Affected Vendor
archive zip
View all reports →Affected Software
archive zip, brightstor arcserve backup, etrust antivirus, etrust antivirus gateway, etrust ez antivirus, etrust ez armor, etrust intrusion detection, etrust secure content manager, inoculateit, nod32 antivirus, kaspersky anti-virus, antivirus engine, rav antivirus desktop, rav antivirus for file servers, rav antivirus for mail servers, sophos anti-virus, sophos puremessage anti-virus, sophos small business suite, linux, mandrake linux, suse linux
Vulnerable Versions:
1.13, 11.1, 7.0, 7.1, 6.1, 6.2, 6.3, 2.0, 2.3, 2.4, 1.4.1.13, 1.4.5, 1.5, 1.0, 1.1, 6.0, 7.0_sp2, 1.0.11, 1.0.12, 1.0.13, 3.0, 4.0, 5.0, 4.3.20, 8.6, 8.4.2, 3.4.6, 3.78, 3.78d, 3.79, 3.80, 3.81, 3.82, 3.83, 3.84, 3.85, 3.86, 4.6, 1.4, 10.1, 9.2
Timeline
Official Publish:
November 19th, 2004
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.