CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and...
CVE-2004-0333 is a high vulnerability (CVSS 10.0) in Uudeview, published March 18, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 24.2%, the 97th percentile. Fixed in uudeview 0.5.20.
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- Record
CVE-2004-0333- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- Record
CVE-2004-0333- Updated
- 2026-11-02
EUVDEUVD-2004-0333 No score
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- Record
EUVD-2004-0333- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hfvp-w94h-cf79 No score
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and...
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- Record
GHSA-hfvp-w94h-cf79- Updated
- 2026-11-02
OSV No score
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- Record
CVE-2004-0333- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0333 No score
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
- Record
DEBIAN-CVE-2004-0333- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | WinZip - MIME Parsing Overflow | 2004-04-15 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
exchange.xforce.ibmcloud.com/vulnerabilities/15490
osvdb.org/4119
securityfocus.com/bid/9758
secunia.com/advisories/10995
ciac.org/ciac/bulletins/o-092.shtml
winzip.com/fmwz90.htm
Show 8 moreShow less
kb.cert.org/vuls/id/116182
openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html
idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true
nvd.nist.gov/vuln/detail/CVE-2004-0333
github.com/advisories/GHSA-hfvp-w94h-cf79
security-tracker.debian.org/tracker/CVE-2004-0333