CVE-2004-0933: Archive Zip

High severity, CVSS 7.5. EPSS: 20.9% chance of exploitation in the next 30 days.

Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected products

  • Archive Zip Archive Zip: version 1.13 only
  • Broadcom Brightstor Arcserve Backup: version 11.1 only
  • Broadcom Etrust Antivirus: version 7.0 only; version 7.1 only
  • Broadcom Etrust Antivirus Gateway: version 7.0 only; version 7.1 only
  • Broadcom Etrust Ez Antivirus: version 6.1 only; version 6.2 only; version 6.3 only
  • Broadcom Etrust Ez Armor: version 2.0 only; version 2.3 only; version 2.4 only
  • Broadcom Etrust Intrusion Detection: version 1.4.1.13 only; version 1.4.5 only; version 1.5 only
  • Broadcom Etrust Secure Content Manager: version 1.0 only; version 1.1 only
  • Broadcom Inoculateit: version 6.0 only
  • Ca Etrust Antivirus: version 7.0_sp2 only
  • Ca Etrust Secure Content Manager: version 1.0 only
  • Eset Software NOD32 Antivirus: version 1.0.11 only; version 1.0.12 only; version 1.0.13 only
  • Gentoo Linux: any version; version 1.4 only
  • Kaspersky Lab Kaspersky Anti-Virus: version 3.0 only; version 4.0 only; version 5.0 only
  • Mandrakesoft Mandrake Linux: version 10.1 only
  • McAfee Antivirus Engine: version 4.3.20 only
  • Rav Antivirus Rav Antivirus Desktop: version 8.6 only
  • Rav Antivirus Rav Antivirus For File Servers: version 1.0 only
  • Rav Antivirus Rav Antivirus For Mail Servers: version 8.4.2 only
  • Sophos Sophos Anti-Virus: version 3.4.6 only; version 3.78 only; version 3.78d only; version 3.79 only; version 3.80 only; version 3.81 only; …
  • Sophos Sophos Puremessage Anti-Virus: version 4.6 only
  • Sophos Sophos Small Business Suite: version 1.0 only
  • Suse Suse Linux: version 9.2 only

Published 2005-01-27. Last modified 2026-06-16.