Description
Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file.
References
- 15293 vdb-entry
- 20051102 [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header mailing-list
- fprotantivirus-zip-bypass-protection(22967) vdb-entry
- 20865 vdb-entry
- 20090402 [TZO-07-2009] F-PROT ZIP Method evasion mailing-list
- 1015148 vdb-entry
- http://thierry.sniff-em.com/research/fprot.html
- 20051103 [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header mailing-list
- http://www.zoller.lu/research/fprot.htm