CVE-2004-1465 in WinZip

Summary

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 02/13/2005
• Disclosure: 12/31/2004
• Moderation: VulDB entry created
• Entries: VDB-820 (2)
• CPE: ready
• CWE: CWE-119 (Confirmed)
• Exploit: Download
• CVSS: 6.3
• EPSS: 0.02539
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1465
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1465
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1465/