CVE-2004-0575
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows...
CVE-2004-0575 is a high vulnerability (CVSS 10.0) in Microsoft Windows Xp, published October 16, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 60.3%, the 99th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 60.3%EPSS, 99th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows - Compressed Zipped Folders (MS04-034) | 2004-11-19 |
| Exploit-DB | GetRight 5.2a - '.grs' Skin File Buffer Overflow | 2004-12-06 |
What each source reports
NVD Score used
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
- Record
CVE-2004-0575- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
- Record
CVE-2004-0575- Updated
- 2026-11-02
EUVDEUVD-2004-0574No score
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
- Record
EUVD-2004-0574- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w8hg-7c82-p34gNo score
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows...
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
- Record
GHSA-w8hg-7c82-p34g- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1011637
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3913
marc.info?l=ntbugtraq&m=109767342326300&w=2
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-034
ciac.org/ciac/bulletins/p-010.shtml
eeye.com/html/research/advisories/AD20041012A.html
Show 8 moreShow less
kb.cert.org/vuls/id/649374
exchange.xforce.ibmcloud.com/vulnerabilities/17624
nvd.nist.gov/vuln/detail/CVE-2004-0575
github.com/advisories/GHSA-w8hg-7c82-p34g