winzip vulnerabilities and exploits

(subscribe to this query)

WinZip prior to 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle malicious users to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

Winzip Winzip 7.0 Winzip Winzip 8.0 Winzip Winzip 8.1 Winzip Winzip 9.0 Winzip Winzip 10.0

Multiple buffer overflows in WinZip 9.0 and previous versions may allow malicious users to execute arbitrary code via multiple vectors, including the command line.

Winzip Winzip 7.0 Winzip Winzip 8.0 Winzip Winzip 8.1 Winzip Winzip 9.0

1 EDB exploit

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote malicious users to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnera...

Sky Software Fileview Activex Control Winzip Winzip Winzip Winzip 7.0 Winzip Winzip 8.0 Winzip Winzip 8.1 Winzip Winzip 9.0

1 EDB exploit

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote malicious users to execute arbitrary code via a MIME archive with certain long MIME parameters.

Openpkg Openpkg Uudeview Uudeview 0.5.18 Uudeview Uudeview 0.5.19 Winzip Winzip 7.0 Winzip Winzip 8.0 Winzip Winzip 8.1 Gentoo Linux 1.4

1 EDB exploit

Buffer overflow in WinZip 8.0 allows malicious users to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option.

Winzip Winzip 8.0

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote malicious users to execute arbitrary code via unspecified "unsafe methods."

Winzip Winzip 10.0

1 EDB exploit

WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.

Winzip Winzip 8.0

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32...

Winzip Winzip 9.0

1 EDB exploit

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote malicious users to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vuln...

Winzip Winzip 10.0 Build 6667

3 EDB exploits

In WinZip up to and including 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an incomplete fix for CVE-2024-8811. This vulnerability allows malicious users to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction i...

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook