CVE-2004-0933: archive_zip

CVSS: 7.5v2.0HighModified

Published 19-11-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0933 is a high (CVSS 7.5) vulnerability in archive_zip. EPSS estimates a 20.85% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

44/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

20.85%

0%100%

High · +0.16 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

19-11-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

20.85%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

+0.16 pp

From 20.69% on 18-09-2026

18-09-202618-10-2026

EPSS score

20.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalmultipleVerified
Multiple AntiVirus - '.zip' Detection Bypass
Maturity: weaponized