CVE-2004-1465

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

DEBIAN-CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

Multiple WinZip buffer overflows

No description provided...

[SA12430] Winzip Unspecified Multiple Buffer Overflow Vulnerabilities

TITLE: Winzip Unspecified Multiple Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA12430 VERIFY ADVISORY: http://secunia.com/advisories/12430/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WinZip 9.x http://secunia.com/product/567/ WinZip 8.x...

[Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog

According to various sources on the net, the vulnerable LHa code has been used in other products. SecurityFocus says that WinZip and WinRar also are vulnerable to the LHa buffer overflows: http://www.securityfocus.com/bid/10243/info/ I have found a mailing list discussion about my LHa test archiv...

WinZip - MIME Parsing Overflow

WinZip - MIME Parsing Overflow / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent becoz m...

WinZIP MIME Parsing Overflow Proof of Concept Exploit

Exploit for unknown platform in category local exploits ===================================================== WinZIP MIME Parsing Overflow Proof of Concept Exploit ===================================================== / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME...

WinZip - MIME Parsing Overflow

/ Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent becoz my idiotic shellcode uses...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0333

CVE-2004-0333 describes a buffer overflow in the UUDeview component used by WinZip 6.2–8.1 SR-1 (and possibly other packages). The overflow can be triggered by decoding a MIME archive with long MIME parameters, allowing remote code execution. Multiple sources corroborate the same core issue acros...

WinZip vulnerable to buffer overflow in handling of MIME archive parameters

Overview A buffer overflow vulnerability in the WinZip program could allow a remote attacker to execute arbitrary code on a vulnerable system. Description WinZip Computing, Inc.'s WinZip is a popular utility for creating and extracting a variety of archive file formats on Microsoft Windows-based...

iDEFENSE Security Advisory 02.27.04a: WinZip MIME Parsing Buffer Overflow Vulnerability

WinZip MIME Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.27.04a: http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti es February 27, 2004 I. BACKGROUND WinZip is an archiving utility for the Microsoft Windows platform featuring built-in support for CAB...

WinZIP mail format buffer overflow

Heap overflow on parsing different mail formats...

CVE-2003-1376

WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder...

Yet another plaintext attack to ZIP encryption scheme.

Introduction ------------ The ZIP format is one of the most widely used compresion/archival programs on computers systems, its use is even more extended on Windows plataform, with WinZIP program. Known Attacks ------------- The PKZIP encryption scheme have been proved to be weak in a lot of paper...

Directory traversal vulnerabilities in several archivers processing .tar

Subject Directory traversal vulnerabilities in several archivers processing .tar files Author Florian "sticky bit" Schafferhans [email protected] http://www.computer-security.de/ Date 17. December 2002 Affected GNU cpio 2.5 http://www.gnu.org/ tested on Linux 2.2.19 Winzip Computing WinZip...

R7-0004: Multiple Vendor Long ZIP Entry Filename Processing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rapid 7, Inc. Security Advisory Visit http://www.rapid7.com/ to download NeXposetm, our advanced vulnerability scanner. Linux and Windows 2000 versions are available now! Rapid 7 Advisory R7-0004 Multiple Vendor Long ZIP Entry Filename Processing Issu...