Winzip vulnerabilities

Products

• Winzip 15

Newest

• winzip In WinZip through 29.0, there is a Mark-of-the-Web Bypass Vulnerability because of an incomplete... CVE-2025-33028 Disputed 6.1 MediumApril 15, 2025
• winzip WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CVE-2025-1240 EPSS 10.3% 7.8 HighFebruary 11, 2025
• winzip WinZip Mark-of-the-Web Bypass Vulnerability CVE-2024-8811 7.8 HighNovember 22, 2024
• winzip WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the... CVE-2008-3442 7.5 HighAugust 1, 2008
• winzip Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service ... CVE-2007-0264 Public exploit 6.6 MediumJanuary 16, 2007
• winzip Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView"... CVE-2006-6884 Public exploit 9.3 HighDecember 31, 2006
• sky software fileview activex control, winzip +1 more Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10... CVE-2006-3890 Public exploit EPSS 14.6% 9.3 HighNovember 21, 2006
• winzip The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for... CVE-2006-5198 Public exploit EPSS 62.1% 4.0 MediumNovember 14, 2006
• winzip Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code... CVE-2004-1465 Public exploit 3.7 LowDecember 31, 2004
• redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 more Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to... CVE-2004-0235 Fix available 6.4 MediumMay 5, 2004
• redhat lha, clearswift mailsweeper, f-secure anti-virus +9 more +11 more Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as... CVE-2004-0234 Fix available EPSS 10.3% 10.0 HighMay 5, 2004
• uudeview, winzip, gentoo linux +1 more +3 more Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and... CVE-2004-0333 Public exploitFix available EPSS 24.2% 10.0 HighMarch 18, 2004
• winzip WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows... CVE-2003-1376 4.6 MediumDecember 31, 2003
• allume systems division stuffit expander, ibm lotus notes, microsoft windows me +4 more +6 more Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a... CVE-2002-0370 EPSS 43.3% 7.5 HighOctober 5, 2002
• winzip Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name... CVE-2001-0449 4.6 MediumJune 27, 2001