Lucene search
HistoryFeb 13, 2005 - 5:00 a.m.
CVE-2004-1465
cve-2004-1465
buffer overflow
winzip
arbitrary code execution
nvd
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.1%
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Affected configurations
Node
winzipwinzipMatch7.0
ORwinzipwinzipMatch8.0
ORwinzipwinzipMatch8.1
ORwinzipwinzipMatch8.1sr1
ORwinzipwinzipMatch9.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| winzip:winzip | winzip | eq | 7.0 |
| winzip:winzip | winzip | eq | 8.0 |
| winzip:winzip | winzip | eq | 8.1 |
| winzip:winzip | winzip | eq | 9.0 |
Related
nvd
nvd
CVE-2004-1465
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-1465
2005-02-13 05:00:00
nessus
nessus
WinZip <= 9.0 Multiple Unspecified Overflows
2005-03-18 00:00:00
3.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.1%
Related for CVE-2004-1465