Read the docs
TI-2004-00846 Aliases CVE-2004-0934GHSA-gwc5-jmr7-4xw5

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a…

Priority MEDIUM 49Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

Why it matters now

EPSS 0.14902 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:a:archive_zip:archive_zip:1.13:*:*:*:*:*:*:*1.13VulnerableArchive Zip
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:*11.1VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_antivirus:7.0:*:*:*:*:*:*:*7.0VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:*7.1VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.0:*:*:*:*:*:*:*7.0VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.1:*:*:*:*:*:*:*7.1VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.1:*:*:*:*:*:*:*6.1VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.2:*:*:*:*:*:*:*6.2VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_ez_antivirus:6.3:*:*:*:*:*:*:*6.3VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_ez_armor:2.0:*:*:*:*:*:*:*2.0VulnerableBroadcom
  • cpe:2.3:a:archive_zip:archive_zip:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·Archive Zip
  • cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_antivirus:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_antivirus:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_antivirus_gateway:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_ez_antivirus:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_ez_antivirus:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_ez_antivirus:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_ez_armor:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Broadcom
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:broadcom:etrust_ez_armor:2.3:*:*:*:*:*:*:*2.3VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_ez_armor:2.4:*:*:*:*:*:*:*2.4VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.1.13:*:*:*:*:*:*:*1.4.1.13VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_intrusion_detection:1.5:*:*:*:*:*:*:*1.5VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_secure_content_manager:1.0:*:*:*:*:*:*:*1.0VulnerableBroadcom
cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:*1.1VulnerableBroadcom
cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*6.0VulnerableBroadcom
cpe:2.3:a:ca:etrust_antivirus:7.0_sp2:*:*:*:*:*:*:*7.0_sp2VulnerableCa
cpe:2.3:a:ca:etrust_secure_content_manager:1.0:sp1:*:*:*:*:*:*1.0 sp1VulnerableCa
cpe:2.3:a:eset_software:nod32_antivirus:1.0.11:*:*:*:*:*:*:*1.0.11VulnerableEset Software
cpe:2.3:a:eset_software:nod32_antivirus:1.0.12:*:*:*:*:*:*:*1.0.12VulnerableEset Software
cpe:2.3:a:eset_software:nod32_antivirus:1.0.13:*:*:*:*:*:*:*1.0.13VulnerableEset Software
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:3.0:*:*:*:*:*:*:*3.0VulnerableKaspersky Lab
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:4.0:*:*:*:*:*:*:*4.0VulnerableKaspersky Lab
cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:*:*:*:*:*:*5.0VulnerableKaspersky Lab
cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:*4.3.20VulnerableMcAfee
cpe:2.3:a:rav_antivirus:rav_antivirus_desktop:8.6:*:*:*:*:*:*:*8.6VulnerableRav Antivirus
cpe:2.3:a:rav_antivirus:rav_antivirus_for_file_servers:1.0:*:*:*:*:*:*:*1.0VulnerableRav Antivirus
cpe:2.3:a:rav_antivirus:rav_antivirus_for_mail_servers:8.4.2:*:*:*:*:*:*:*8.4.2VulnerableRav Antivirus
cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:*3.4.6VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:*3.78VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.78d:*:*:*:*:*:*:*3.78dVulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.79:*:*:*:*:*:*:*3.79VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.80:*:*:*:*:*:*:*3.80VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.81:*:*:*:*:*:*:*3.81VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.82:*:*:*:*:*:*:*3.82VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.83:*:*:*:*:*:*:*3.83VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.84:*:*:*:*:*:*:*3.84VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.85:*:*:*:*:*:*:*3.85VulnerableSophos
cpe:2.3:a:sophos:sophos_anti-virus:3.86:*:*:*:*:*:*:*3.86VulnerableSophos
cpe:2.3:a:sophos:sophos_puremessage_anti-virus:4.6:*:*:*:*:*:*:*4.6VulnerableSophos
cpe:2.3:a:sophos:sophos_small_business_suite:1.0:*:*:*:*:*:*:*1.0VulnerableSophos
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*all versionsVulnerablegentoo
cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*1.4Vulnerablegentoo
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*9.2VulnerableSUSE
  • cpe:2.3:a:broadcom:etrust_ez_armor:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_ez_armor:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.1.13:*:*:*:*:*:*:* Versions 1.4.1.13 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_intrusion_detection:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_intrusion_detection:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_secure_content_manager:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:etrust_secure_content_manager:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Broadcom
  • cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Broadcom
  • cpe:2.3:a:ca:etrust_antivirus:7.0_sp2:*:*:*:*:*:*:* Versions 7.0_sp2 Vulnerable ·Ca
  • cpe:2.3:a:ca:etrust_secure_content_manager:1.0:sp1:*:*:*:*:*:* Versions 1.0 sp1 Vulnerable ·Ca
  • cpe:2.3:a:eset_software:nod32_antivirus:1.0.11:*:*:*:*:*:*:* Versions 1.0.11 Vulnerable ·Eset Software
  • cpe:2.3:a:eset_software:nod32_antivirus:1.0.12:*:*:*:*:*:*:* Versions 1.0.12 Vulnerable ·Eset Software
  • cpe:2.3:a:eset_software:nod32_antivirus:1.0.13:*:*:*:*:*:*:* Versions 1.0.13 Vulnerable ·Eset Software
  • cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Kaspersky Lab
  • cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Kaspersky Lab
  • cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Kaspersky Lab
  • cpe:2.3:a:mcafee:antivirus_engine:4.3.20:*:*:*:*:*:*:* Versions 4.3.20 Vulnerable ·McAfee
  • cpe:2.3:a:rav_antivirus:rav_antivirus_desktop:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Rav Antivirus
  • cpe:2.3:a:rav_antivirus:rav_antivirus_for_file_servers:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Rav Antivirus
  • cpe:2.3:a:rav_antivirus:rav_antivirus_for_mail_servers:8.4.2:*:*:*:*:*:*:* Versions 8.4.2 Vulnerable ·Rav Antivirus
  • cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:* Versions 3.4.6 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:* Versions 3.78 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.78d:*:*:*:*:*:*:* Versions 3.78d Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.79:*:*:*:*:*:*:* Versions 3.79 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.80:*:*:*:*:*:*:* Versions 3.80 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.81:*:*:*:*:*:*:* Versions 3.81 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.82:*:*:*:*:*:*:* Versions 3.82 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.83:*:*:*:*:*:*:* Versions 3.83 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.84:*:*:*:*:*:*:* Versions 3.84 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.85:*:*:*:*:*:*:* Versions 3.85 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_anti-virus:3.86:*:*:*:*:*:*:* Versions 3.86 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_puremessage_anti-virus:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·Sophos
  • cpe:2.3:a:sophos:sophos_small_business_suite:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Sophos
  • cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·gentoo
  • cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·gentoo
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-0934
  2. 2026-10-03 Alias added: GHSA-gwc5-jmr7-4xw5

References

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences