
Attackers could use a .zip file vulnerability in multiple antivirus software products to escape detection, according to security firm iDefense. It’s possible to modify the uncompressed size of archived files in both the local and global header without affecting functionality. This vulnerability has been confirmed with both WinZip and Microsoft compressed folders.