PatchTheCVEarchive zip vulnerabilities and fixes
Recent CVEs affecting archive zip, with upgrade or downgrade steps. 6 tracked.
Also searched as: archivezip.
archive zip has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-02-09. Highest priority: CVE-2004-0933 (score 56/100).
- CVE-2004-0937 HIGH 7.5 DOWNGRADE DOWNGRADE Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote
- CVE-2004-0936 HIGH 7.5 DOWNGRADE DOWNGRADE RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and
- CVE-2004-0935 HIGH 7.5 DOWNGRADE DOWNGRADE Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via
- CVE-2004-0934 HIGH 7.5 DOWNGRADE DOWNGRADE Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both lo
- CVE-2004-0933 HIGH 7.5 DOWNGRADE DOWNGRADE Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway
- CVE-2004-0932 HIGH 7.5 DOWNGRADE DOWNGRADE McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 Octobe
FAQ
How do I fix archive zip vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is archive zip being exploited right now?
None of the tracked archive zip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which archive zip CVE should I patch first?
CVE-2004-0933 currently ranks highest (56/100): Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway.