CVE-2004-0934: archive_zip

CVSS: 7.5v2.0HighModified

Published 19-11-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0934 is a high (CVSS 7.5) vulnerability in archive_zip. EPSS estimates a 14.90% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

43/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

14.90%

0%100%

Medium · +0.12 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference, exploit-database

Timeline

19-11-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

14.90%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

+0.12 pp

From 14.79% on 18-09-2026

18-09-202618-10-2026

EPSS score

14.90%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaselocalmultipleVerified
Multiple AntiVirus - '.zip' Detection Bypass
Maturity: weaponized