| Package | Affected versions | Patched versions |
|---|---|---|
| archive zip | = 1.13 | |
| brightstor arcserve backup | = 11.1 | |
| etrust antivirus | = 7.0= 7.1 | |
| etrust antivirus gateway | = 7.0= 7.1 | |
| etrust ez antivirus | = 6.1= 6.2= 6.3 | |
| etrust ez armor | = 2.0= 2.3= 2.4 | |
| etrust intrusion detection | = 1.4.1.13= 1.4.5= 1.5 | |
| etrust secure content manager | = 1.0= 1.1 | |
| inoculateit | = 6.0 | |
| etrust antivirus | = 7.0_sp2 | |
| etrust secure content manager | = 1.0 | |
| nod32 antivirus | = 1.0.11= 1.0.12= 1.0.13 | |
| kaspersky anti-virus | = 3.0= 4.0= 5.0 | |
| antivirus engine | = 4.3.20 | |
| rav antivirus desktop | = 8.6 | |
| rav antivirus for file servers | = 1.0 | |
| rav antivirus for mail servers | = 8.4.2 | |
| sophos anti-virus | = 3.4.6= 3.78= 3.78d= 3.79= 3.80= 3.81= 3.82= 3.83= 3.84= 3.85= 3.86 | |
| sophos puremessage anti-virus | = 4.6 | |
| sophos small business suite | = 1.0 |
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free