CVE-2004-2442: F-Secure Anti-Virus

Medium severity, CVSS 5.0. EPSS: 10.6% chance of exploitation in the next 30 days.

Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.

Affected products

• F-Secure F-Secure Anti-Virus: version 4.51 only; version 4.52 only; version 4.60 only; version 4.61 only; version 5.0 only; version 5.5 only; …
• F-Secure F-Secure For Firewalls: version 6.20 only
• F-Secure F-Secure Internet Security: version 2004 only; version 2005 only
• F-Secure F-Secure Personal Express: version 4.5 only; version 4.6 only; version 4.7 only; version 5.0 only
• F-Secure Internet Gatekeeper: version 2.6 only; version 6.3 only; version 6.4 only; version 6.31 only; version 6.32 only; version 6.41 only

Published 2004-12-31. Last modified 2026-06-16.