WI
Vendor
Winzip
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-1240 | WI Winzip Winzip | 8.8 | Feb 11 | WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2024-8811 | WI Winzip Winzip | 7.8 | Nov 22 | WinZip Mark-of-the-Web Bypass Vulnerability |
| CVE-2008-3442 | WI Winzip Winzip | – | Aug 1 | WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as… |
| CVE-2007-0264 | WI Winzip Winzip | – | Jan 16 | Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line… |
| CVE-2006-6884 | WI Winzip Winzip | – | Dec 31 | Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute… |
| CVE-2006-3890 | WI Winzip Winzip | – | Nov 21 | Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to… |
| CVE-2006-5198 | WI Winzip Winzip | – | Nov 14 | The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code… |
| CVE-2004-1465 | WI Winzip Winzip | – | Dec 31 | Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line |
| CVE-2004-0333 | WI Winzip Winzip | – | Nov 23 | Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME… |
| CVE-2004-0235 | WI Winzip Winzip | – | Aug 18 | Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) |
| CVE-2004-0234 | WI Winzip Winzip | – | Aug 18 | Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local… |
| CVE-2003-1376 | WI Winzip Winzip | – | Dec 31 | WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file… |
| CVE-2002-0370 | WI Winzip Winzip | – | Oct 10 | Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with… |
| CVE-2001-0449 | WI Winzip Winzip | – | Jun 27 | Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option |