low3.7Public exploit code
CVE-2004-1465
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WinZip 8.1 - Command Line Local Buffer Overflow2005-06-07 · local · windows · Verified
Impact
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winzip | Winzip | Versions 7.0, 8.0, 8.1, 9.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109416099301369&w=2
- http://securitytracker.com/id?1011132
- http://www.ciac.org/ciac/bulletins/o-211.shtml
- http://www.securityfocus.com/bid/11092
- http://www.winzip.com/wz90sr1.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17192
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17197
- http://marc.info/?l=bugtraq&m=109416099301369&w=2
- http://securitytracker.com/id?1011132
- http://www.ciac.org/ciac/bulletins/o-211.shtml
- http://www.securityfocus.com/bid/11092
- http://www.winzip.com/wz90sr1.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17192
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17197