PT-2007-1736 · Winzip · Winzip

Publicado 2007-01-16 · Atualizado 2008-11-15 · CVE-2007-0264

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WinZip version 9.0

Description A buffer overflow issue in Winzip32.exe allows local users to cause a denial of service, potentially leading to an application crash, and may also enable the execution of arbitrary code via a long command line argument. This issue could potentially cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted input filenames.

Recommendations For WinZip version 9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-0264

Produtos afetados

Winzip

Referências · 4

• 🔥 https://exploit-db.com/exploits/29447 · Exploit
• http://securityfocus.com/bid/22020 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0264 · Nota de Segurança
• http://osvdb.org/39800 · Nota