CVE-2004-0937: Archive Zip

High severity, CVSS 7.5. EPSS: 14.9% chance of exploitation in the next 30 days.

Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected products

• Archive Zip Archive Zip: version 1.13 only
• Broadcom Brightstor Arcserve Backup: version 11.1 only
• Broadcom Etrust Antivirus: version 7.0 only; version 7.1 only
• Broadcom Etrust Antivirus Gateway: version 7.0 only; version 7.1 only
• Broadcom Etrust Ez Antivirus: version 6.1 only; version 6.2 only; version 6.3 only
• Broadcom Etrust Ez Armor: version 2.0 only; version 2.3 only; version 2.4 only
• Broadcom Etrust Intrusion Detection: version 1.4.1.13 only; version 1.4.5 only; version 1.5 only
• Broadcom Etrust Secure Content Manager: version 1.0 only; version 1.1 only
• Broadcom Inoculateit: version 6.0 only
• Ca Etrust Antivirus: version 7.0_sp2 only
• Ca Etrust Secure Content Manager: version 1.0 only
• Eset Software NOD32 Antivirus: version 1.0.11 only; version 1.0.12 only; version 1.0.13 only
• Gentoo Linux: any version; version 1.4 only
• Kaspersky Lab Kaspersky Anti-Virus: version 3.0 only; version 4.0 only; version 5.0 only
• Mandrakesoft Mandrake Linux: version 10.1 only
• McAfee Antivirus Engine: version 4.3.20 only
• Rav Antivirus Rav Antivirus Desktop: version 8.6 only
• Rav Antivirus Rav Antivirus For File Servers: version 1.0 only
• Rav Antivirus Rav Antivirus For Mail Servers: version 8.4.2 only
• Sophos Sophos Anti-Virus: version 3.4.6 only; version 3.78 only; version 3.78d only; version 3.79 only; version 3.80 only; version 3.81 only; …
• Sophos Sophos Puremessage Anti-Virus: version 4.6 only
• Sophos Sophos Small Business Suite: version 1.0 only
• Suse Suse Linux: version 9.2 only

Published 2005-02-09. Last modified 2026-06-16.