GitHub - Bombadil-Systems/zombie-zip: Malformed ZIP archive that evades antivirus detection by declaring Method=0 (stored) while containing DEFLATE-compressed payload.

https://github.com/bombadil-systems/zombie-zip

Not solved problem since 20 years

See also https://kb.cert.org/vuls/id/976247

6 points · 2 comments · view on lemmy.world

2 Comments

rijom@lemmy.ml · 1 pts · 161d (1 reply)

How is this different from just any simple encryption of a valid zip?

Zerush@lemmy.ml · 1 pts · 161d

It isn't, that is the problem for AVs to detect it