CVE-2004-1465 Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
LowCVSS 3.7
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winzip | = 7.0 | No fix listed |
| winzip | = 8.0 | No fix listed |
| winzip | = 8.1 | No fix listed |
| winzip | = 8.1-sr1 | No fix listed |
| winzip | = 9.0 | No fix listed |
References
- 20040901 WinZip Unspecified Buffer Overflows May Let Remote or Local Users Execute Arbitrary Code mailing-list
- 1011132 patch vdb-entry
- O-211 government-resource third-party-advisory vendor-advisory
- 11092 patch vdb-entry
- www.winzip.com patch
- winzip-code-execution(17192) vdb-entry
- winzip-command-line-bo(17197) vdb-entry