CVE:CVE-2004-0937
CNNVD:CNNVD-200502-042
McAfee，Computer Associates， Kaspersky， Sophos， Eset and RAV是一些反病毒软件。
多家防病毒厂商软件在处理.zip文件时存在问题，远程攻击者可以利用这个漏洞夹带恶意代码绕过反病毒软件的检查。
问题存在于对.zip档头字段的解析，.zip文件格式存储压缩文件的信息分两个部分，一个是本地(local)头字段，一个是全局(global)头字段。本地头字段数据存在于压缩数据文件之前，而全局字段存在于.zip档最后。攻击者可以修改本地和全局头字段信息中归档文件未压缩字节大小值而不影响功能，但多家防病毒厂商软件对这样的档文件就不能很好的处理，如果在压缩负载中带有恶意代码，就不能被检测到。
solution:Upgrade archive_zip archive_zip to a higher version than 1.13,and avoid the version 1.13; Upgrade broadcom brightstor_arcserve_backup to a higher version than 11.1,and avoid the version 11.1; Upgrade broadcom etrust_antivirus to a higher version than 7.0,7.1,and avoid the version 7.0,7.1; Upgrade broadcom etrust_antivirus_gateway to a higher version than 7.0,7.1,and avoid the version 7.0,7.1; Upgrade broadcom etrust_ez_antivirus to a higher version than 6.1,6.2,6.3,and avoid the version 6.1,6.2,6.3; Upgrade broadcom etrust_ez_armor to a higher version than 2.0,2.3,2.4,and avoid the version 2.0,2.3,2.4; Upgrade broadcom etrust_intrusion_detection to a higher version than 1.4.1.13,1.4.5,1.5,and avoid the version 1.4.1.13,1.4.5,1.5; Upgrade broadcom etrust_secure_content_manager to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade broadcom inoculateit to a higher version than 6.0,and avoid the version 6.0; Upgrade ca etrust_antivirus to a higher version than 7.0_sp2,and avoid the version 7.0_sp2; Upgrade ca etrust_secure_content_manager to a higher version than 1.0:sp1,and avoid the version 1.0:sp1; Upgrade eset_software nod32_antivirus to a higher version than 1.0.11,1.0.12,1.0.13,and avoid the version 1.0.11,1.0.12,1.0.13; Upgrade kaspersky_lab kaspersky_anti-virus to a higher version than 3.0,4.0,5.0,and avoid the version 3.0,4.0,5.0; Upgrade mcafee antivirus_engine to a higher version than 4.3.20,and avoid the version 4.3.20; Upgrade rav_antivirus rav_antivirus_desktop to a higher version than 8.6,and avoid the version 8.6; Upgrade rav_antivirus rav_antivirus_for_file_servers to a higher version than 1.0,and avoid the version 1.0; Upgrade rav_antivirus rav_antivirus_for_mail_servers to a higher version than 8.4.2,and avoid the version 8.4.2; Upgrade sophos sophos_anti-virus to a higher version than 3.4.6,3.78,3.78d,3.79,3.80,3.81,3.82,3.83,3.84,3.85,3.86,and avoid the version 3.4.6,3.78,3.78d,3.79,3.80,3.81,3.82,3.83,3.84,3.85,3.86; Upgrade sophos sophos_puremessage_anti-virus to a higher version than 4.6,and avoid the version 4.6; Upgrade sophos sophos_small_business_suite to a higher version than 1.0,and avoid the version 1.0; Upgrade gentoo linux to a higher version than *,1.4,and avoid the version 1.4; Upgrade mandrakesoft mandrake_linux to a higher version than 10.1,and avoid the version 10.1; Upgrade suse suse_linux to a higher version than 9.2,and avoid the version 9.2