CVE-2004-0932

CVE-2004-0932 describes a bypass vulnerability in McAfee Anti-Virus Engine DATS drivers (before versions 4398 and 4397, respectively) and other antivirus products. Attackers can exploit this by crafting compressed files with zeroed local and global headers, allowing malicious content to bypass antivirus detection and be opened on a target system. This vulnerability carries a CVSS score of 7.5, indicating high severity with network-based attacks requiring low complexity and no authentication, potentially leading to partial confidentiality, integrity, and availability impacts. Its FAUCET Risk Score is 98/100, highlighting its significant risk. While not listed in CISA's KEV catalog, exploit code (EDB-629) is publicly available, demonstrating its exploitability. The vulnerability has garnered significant community discussion with 10 mentions, suggesting active awareness and interest despite no known Metasploit or Nuclei modules.