CVE-2004-0333 Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain l...
HighCVSS 10.0
EPSS 24.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openpkg | All versions | No fix listed |
| uudeview | = 0.5.18 | No fix listed |
| uudeview | = 0.5.19 | No fix listed |
| winzip | = 7.0 | No fix listed |
| winzip | = 8.0 | No fix listed |
| winzip | = 8.1 | No fix listed |
| winzip | = 8.1-sr1 | No fix listed |
| gentoo linux | = 1.4 | No fix listed |
| gentoo linux | = 1.4-rc1 | No fix listed |
| gentoo linux | = 1.4-rc2 | No fix listed |
| gentoo linux | = 1.4-rc3 | No fix listed |
| debian/uudeview(Debian:12) | < 0.5.20 | 0.5.20 |
| debian/uudeview(Debian:13) | < 0.5.20 | 0.5.20 |
| debian/uudeview(Debian:14) | < 0.5.20 | 0.5.20 |
References
- 10995 third-party-advisory
- 11019 third-party-advisory
- O-092 government-resource third-party-advisory
- 20040227 WinZip MIME Parsing Buffer Overflow Vulnerability third-party-advisory
- VU#116182 third-party-advisory us-government-resource
- www.openpkg.org
- 4119 vdb-entry
- 9758 exploit patch vdb-entry vendor-advisory
- www.winzip.com
- winzip-mime-bo(15336) vdb-entry
- uudeview-multiple-bo(15490) vdb-entry
- Debian Security Tracker CVE-2004-0333 vendor-advisory