Unscored severity · published Dec 31, 2004
CVE-2004-1465
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winzip · Winzip
7.0; 8.0; 8.1; 8.1; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1465
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1465
marc.info
http://marc.info/?l=bugtraq&m=109416099301369&w=2
Patch
http://securitytracker.com/id?1011132
Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-211.shtml
Patch
http://www.securityfocus.com/bid/11092
Patch
http://www.winzip.com/wz90sr1.htm
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17192
More from Winzip
8.8
CVE-2025-1240
WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
7.8
CVE-2024-8811
WinZip Mark-of-the-Web Bypass Vulnerability
6.1
CVE-2025-33028
In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an incomplete fix for CVE-2024-8811
–
CVE-2008-3442
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as…
–
CVE-2007-0264
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line…