{"schemaVersion":3,"id":"CVE-2004-0932","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.","dates":{"published":"2004-11-19T05:00:00.000Z","modified":"2024-08-08T00:31:48.096Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.63644,"percentile":0.99213,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":-2.1199999999999997,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.65764},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.63644,"percentile":0.99213}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.65764,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.63394,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.63644,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.63644,"percentile":0.99213}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_6446E223A28AB1EC","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/11448","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"629","name":"Multiple AntiVirus - '.zip' Detection Bypass","source":"exploit-database","url":"https://www.exploit-db.com/exploits/629","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"multiple","file":"exploits/multiple/local/629.c","codes":["OSVDB-10963","CVE-2004-2442","CVE-2004-1096","CVE-2004-0937","CVE-2004-0936","CVE-2004-0935","CVE-2004-0934","CVE-2004-0933","CVE-2004-0932"]},"metasploit":null}],"exploitCount":2,"weaknesses":[],"affected":[{"vendor":"archive_zip","product":"archive_zip","name":"archive zip","label":"archive_zip","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.13","eol":null,"hubHref":"/vendor/archive_zip/archive_zip"},{"vendor":"broadcom","product":"brightstor_arcserve_backup","name":"brightstor arcserve backup","label":"brightstor_arcserve_backup","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.1","eol":null,"hubHref":"/vendor/broadcom/brightstor_arcserve_backup"},{"vendor":"broadcom","product":"etrust_antivirus","name":"etrust antivirus","label":"etrust_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null},{"text":"7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0 | 7.1","eol":null,"hubHref":"/vendor/broadcom/etrust_antivirus"},{"vendor":"broadcom","product":"etrust_antivirus_gateway","name":"etrust antivirus gateway","label":"etrust_antivirus_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.0","noFixRecorded":false,"fixedIn":null},{"text":"7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0 | 7.1","eol":null,"hubHref":"/vendor/broadcom/etrust_antivirus_gateway"},{"vendor":"broadcom","product":"etrust_ez_antivirus","name":"etrust ez antivirus","label":"etrust_ez_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.1","noFixRecorded":false,"fixedIn":null},{"text":"6.2","noFixRecorded":false,"fixedIn":null},{"text":"6.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.1 | 6.2 | 6.3","eol":null,"hubHref":"/vendor/broadcom/etrust_ez_antivirus"},{"vendor":"broadcom","product":"etrust_ez_armor","name":"etrust ez armor","label":"etrust_ez_armor","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.0","noFixRecorded":false,"fixedIn":null},{"text":"2.3","noFixRecorded":false,"fixedIn":null},{"text":"2.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.0 | 2.3 | 2.4","eol":null,"hubHref":"/vendor/broadcom/etrust_ez_armor"},{"vendor":"broadcom","product":"etrust_intrusion_detection","name":"etrust intrusion detection","label":"etrust_intrusion_detection","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.4.1.13","noFixRecorded":false,"fixedIn":null},{"text":"1.4.5","noFixRecorded":false,"fixedIn":null},{"text":"1.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.4.1.13 | 1.4.5 | 1.5","eol":null,"hubHref":"/vendor/broadcom/etrust_intrusion_detection"},{"vendor":"broadcom","product":"etrust_secure_content_manager","name":"etrust secure content manager","label":"etrust_secure_content_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null},{"text":"1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0 | 1.1","eol":null,"hubHref":"/vendor/broadcom/etrust_secure_content_manager"},{"vendor":"broadcom","product":"inoculateit","name":"inoculateit","label":"inoculateit","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/broadcom/inoculateit"},{"vendor":"ca","product":"etrust_antivirus","name":"etrust antivirus","label":"etrust_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.0_sp2","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.0_sp2","eol":null,"hubHref":"/vendor/ca/etrust_antivirus"},{"vendor":"ca","product":"etrust_secure_content_manager","name":"etrust secure content manager","label":"etrust_secure_content_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0:sp1","eol":null,"hubHref":"/vendor/ca/etrust_secure_content_manager"},{"vendor":"eset_software","product":"nod32_antivirus","name":"nod32 antivirus","label":"nod32_antivirus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0.11","noFixRecorded":false,"fixedIn":null},{"text":"1.0.12","noFixRecorded":false,"fixedIn":null},{"text":"1.0.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0.11 | 1.0.12 | 1.0.13","eol":null,"hubHref":"/vendor/eset_software/nod32_antivirus"},{"vendor":"gentoo","product":"linux","name":"linux","label":"linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.4","eol":null,"hubHref":"/vendor/gentoo/linux"},{"vendor":"kaspersky_lab","product":"kaspersky_anti-virus","name":"kaspersky anti-virus","label":"kaspersky_anti-virus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0","noFixRecorded":false,"fixedIn":null},{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0 | 4.0 | 5.0","eol":null,"hubHref":"/vendor/kaspersky_lab/kaspersky_anti-virus"},{"vendor":"mandrakesoft","product":"mandrake_linux","name":"mandrake linux","label":"mandrake_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.1","eol":null,"hubHref":"/vendor/mandrakesoft/mandrake_linux"},{"vendor":"mcafee","product":"antivirus_engine","name":"antivirus engine","label":"antivirus_engine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.3.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.3.20","eol":null,"hubHref":"/vendor/mcafee/antivirus_engine"},{"vendor":"rav_antivirus","product":"rav_antivirus_desktop","name":"rav antivirus desktop","label":"rav_antivirus_desktop","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.6","eol":null,"hubHref":"/vendor/rav_antivirus/rav_antivirus_desktop"},{"vendor":"rav_antivirus","product":"rav_antivirus_for_file_servers","name":"rav antivirus for file servers","label":"rav_antivirus_for_file_servers","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0","eol":null,"hubHref":"/vendor/rav_antivirus/rav_antivirus_for_file_servers"},{"vendor":"rav_antivirus","product":"rav_antivirus_for_mail_servers","name":"rav antivirus for mail servers","label":"rav_antivirus_for_mail_servers","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"8.4.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"8.4.2","eol":null,"hubHref":"/vendor/rav_antivirus/rav_antivirus_for_mail_servers"},{"vendor":"sophos","product":"sophos_anti-virus","name":"sophos anti-virus","label":"sophos_anti-virus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.4.6","noFixRecorded":false,"fixedIn":null},{"text":"3.78","noFixRecorded":false,"fixedIn":null},{"text":"3.78d","noFixRecorded":false,"fixedIn":null},{"text":"3.79","noFixRecorded":false,"fixedIn":null},{"text":"3.80","noFixRecorded":false,"fixedIn":null},{"text":"3.81","noFixRecorded":false,"fixedIn":null},{"text":"3.82","noFixRecorded":false,"fixedIn":null},{"text":"3.83","noFixRecorded":false,"fixedIn":null},{"text":"3.84","noFixRecorded":false,"fixedIn":null},{"text":"3.85","noFixRecorded":false,"fixedIn":null},{"text":"3.86","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.4.6 | 3.78 | 3.78d | 3.79 | 3.80 | 3.81 | 3.82 | 3.83 | 3.84 | 3.85 | 3.86","eol":null,"hubHref":"/vendor/sophos/sophos_anti-virus"},{"vendor":"sophos","product":"sophos_puremessage_anti-virus","name":"sophos puremessage anti-virus","label":"sophos_puremessage_anti-virus","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"4.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"4.6","eol":null,"hubHref":"/vendor/sophos/sophos_puremessage_anti-virus"},{"vendor":"sophos","product":"sophos_small_business_suite","name":"sophos small business suite","label":"sophos_small_business_suite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.0","eol":null,"hubHref":"/vendor/sophos/sophos_small_business_suite"},{"vendor":"suse","product":"suse_linux","name":"suse linux","label":"suse_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.2","eol":null,"hubHref":"/vendor/suse/suse_linux"}],"affectedCount":23,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17761","label":"exchange.xforce.ibmcloud.com/vulnerabilities/17761","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.securityfocus.com/bid/11448","label":"www.securityfocus.com/bid/11448","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true","label":"www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true","hostname":"www.idefense.com","tags":["Third Party Advisory","X Refsource IDEFENSE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2004-11-19T05:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T00:31:48.096Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":53,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T20:51:31.486Z","stale":false,"partial":false}}