Unscored severity · published Aug 1, 2008
CVE-2008-3442
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as…
–
CVSS
3.8%
EPSS
No
On KEV
Description
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winzip · Winzip
7.0; 8.0; 8.1; 8.1; 9.0; 9.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3442
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3442
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html
securitytracker.com
http://securitytracker.com/id?1020581
www.infobyte.com.ar
http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf
www.infobyte.com.ar
http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz
More from Winzip
8.8
CVE-2025-1240
WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
7.8
CVE-2024-8811
WinZip Mark-of-the-Web Bypass Vulnerability
–
CVE-2007-0264
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line…
–
CVE-2006-6884
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute…
–
CVE-2006-3890
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to…