CVE-2004-0932: archive_zip

CVSS: 7.5v2.0HighModified

Published 19-11-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0932 is a high (CVSS 7.5) vulnerability in archive_zip. EPSS estimates a 63.64% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

53/100

0100

High · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

63.64%

0%100%

Critical · -2.12 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

19-11-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

63.64%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-2.12 pp

From 65.76% on 19-09-2026

19-09-202619-10-2026

EPSS score

63.64%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalmultipleVerified
Multiple AntiVirus - '.zip' Detection Bypass
Maturity: weaponized