CVE-2014-3381 | BDVDB-2026-65227 Detail

Description#

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance (ESA) does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3381
http://tools.cisco.com/security/center/viewAlert.x?alertId=36062

Exploit#

No public exploit known

History#

Version 12014-10-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.