Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多家防病毒厂商软件 安全漏洞
Vulnerability Description
McAfee，Computer Associates， Kaspersky， Sophos， Eset and RAV是一些反病毒软件。 多家防病毒厂商软件在处理.zip文件时存在问题，远程攻击者可以利用这个漏洞夹带恶意代码绕过反病毒软件的检查。 问题存在于对.zip档头字段的解析，.zip文件格式存储压缩文件的信息分两个部分，一个是本地(local)头字段，一个是全局(global)头字段。本地头字段数据存在于压缩数据文件之前，而全局字段存在于.zip档最后。攻击者可以修改本地和全局头字段信息中归档文件
CVSS Information
N/A
Vulnerability Type
N/A