İçeriğe atla
Noroxi

WinZip kayıtları

winzip üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %7,1
Pre-auth RCE
8
Düzeltme kaydı olan
%21,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 24
  2. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2004-0333
    47Planlayın

    Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers

    KritikCVSS 10,0Kavram kanıtıEPSS %24

    uudeview · uudeview23 Kas 2004

  • CVE-2002-0370
    43Planlayın

    Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code v

    YüksekCVSS 7,5İstismar yokEPSS %43

    allume systems division · stuffit expander10 Eki 2002

  • CVE-2004-0234
    43Planlayın

    Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewa

    KritikCVSS 10,0İstismar yokEPSS %10

    clearswift · mailsweeper18 Ağu 2004

  • CVE-2006-3890
    41Planlayın

    Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applic

    KritikCVSS 9,3Kavram kanıtıEPSS %15

    sky software · fileview activex control21 Kas 2006

  • CVE-2025-1240
    38İzleyin

    WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %10

    winzip · winzip11 Şub 2025

  • CVE-2006-6884
    38İzleyin

    Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 a

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    winzip · winzip31 Ara 2006

  • CVE-2006-5198
    34İzleyin

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote

    OrtaCVSS 4,0SilahlaştırılmışEPSS %60

    winzip · winzip14 Kas 2006

  • CVE-2008-3442
    31İzleyin

    WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code

    YüksekCVSS 7,5İstismar yokEPSS %4

    winzip · winzip1 Ağu 2008

  • CVE-2024-8811
    31İzleyin

    WinZip Mark-of-the-Web Bypass Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %0

    winzip · winzip22 Kas 2024

  • CVE-2004-0235
    26İzleyin

    Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive

    OrtaCVSS 6,4İstismar yokEPSS %4

    clearswift · mailsweeper18 Ağu 2004

  • CVE-2007-0264
    26İzleyin

    Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbit

    OrtaCVSS 6,6Kavram kanıtıEPSS %1

    winzip · winzip16 Oca 2007

  • CVE-2001-0449
    18İzleyin

    Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail comm

    OrtaCVSS 4,6İstismar yokEPSS %0

    winzip · winzip27 Haz 2001

  • CVE-2003-1376
    18İzleyin

    WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys

    OrtaCVSS 4,6İstismar yokEPSS %0

    winzip · winzip31 Ara 2003

  • CVE-2004-1465
    14İzleyin

    Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the comman

    DüşükCVSS 3,7Kavram kanıtıEPSS %1

    winzip · winzip31 Ara 2004