PT-2004-1674 · Microsoft · Windows Server 2003 64-Bit Edition+4

Yuji Ukai · Published 2004-10-16 · Updated 2018-10-12 · CVE-2004-0575

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP Microsoft Windows XP 64-bit Edition Microsoft Windows Server 2003 Microsoft Windows Server 2003 64-bit Edition

Description The issue is related to an integer overflow in DUNZIP32.DLL, which allows remote attackers to execute arbitrary code. This is made possible by compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.

Recommendations For Microsoft Windows XP, consider applying security updates or patches to resolve the issue. For Microsoft Windows XP 64-bit Edition, apply the relevant security fixes to prevent exploitation. For Microsoft Windows Server 2003, ensure that all security patches are applied to mitigate the risk. For Microsoft Windows Server 2003 64-bit Edition, update with the latest security updates to fix the issue.

Exploit

Fix

Related Identifiers

CVE-2004-0575

Affected Products

Dunzip32.Dll

Windows Server 2003

Windows Server 2003 64-Bit Edition

Windows Xp

Windows Xp 64-Bit Edition

References · 15

• 🔥 https://exploit-db.com/exploits/677 · Exploit
• 🔥 https://exploit-db.com/exploits/640 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-034 · Vendor Advisory
• http://ciac.org/ciac/bulletins/p-010.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0575 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17624 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17659 · Note
• http://kb.cert.org/vuls/id/649374 · Note
• http://marc.info/?l=ntbugtraq&m=109767342326300&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4276 · Note
• http://eeye.com/html/research/advisories/AD20041012A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3913 · Note
• http://securitytracker.com/id?1011637 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1053 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6397 · Note