CVE-2004-2220: F-Secure Anti-Virus

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection.

Affected products

• F-Secure F-Secure Anti-Virus: version 6.30 only; version 6.30_sr1 only; version 6.31 only

Published 2004-12-31. Last modified 2026-06-16.