Is CVE-2004-0936 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2004-0936, but active exploitation has not been confirmed.

Can CVE-2004-0936 be exploited remotely?

Yes. CVE-2004-0936 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2004-0936?

CVE-2004-0936 has a CVSS score of 7.5 (HIGH).

HOME VULNERABILITIESCVE-2004-0936

HIGHPOC

CVE-2004-0936

NVD-CWE-OtherPublished: January 27, 2005· Updated: Jun 16, 2026

7.5

CVSS v3.1

Official Description

RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

NVD Source

Technical Analysis

CVE-2004-0936 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A proof-of-concept (PoC) exploit exists for CVE-2004-0936. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.

User Interaction

Scope

Impact

ConfidentialityP

IntegrityP

AvailabilityP

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors & Products

archive_zip1 product(s)

archive zip

broadcom8 product(s)

brightstor arcserve backupetrust antivirusetrust antivirus gatewayetrust ez antivirusetrust ez armoretrust intrusion detectionetrust secure content managerinoculateit

ca2 product(s)

etrust antivirusetrust secure content manager

eset_software1 product(s)

nod32 antivirus

gentoo1 product(s)

linux

kaspersky_lab1 product(s)

kaspersky anti-virus

mandrakesoft1 product(s)

mandrake linux

mcafee1 product(s)

antivirus engine