CVE-2004-1096

None

CVSS

—

EPSS

18.8%

Published

Jan 10, 2005

CISA due date

—

The record

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Affected packages

Ecosystem	Package	Fixed
Debian:11	libarchive-zip-perl	1.14-1
Debian:12	libarchive-zip-perl	1.14-1
Debian:13	libarchive-zip-perl	1.14-1

Related vulnerabilities

CVE-2018-10860 perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. Also affects libarchive-zip-perl