Winzip : Security Vulnerabilities, CVEs, Published In 2008 (Code Execution)
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Max CVSS
7.5
EPSS Score
0.17%
Published
2008-08-01
Updated
2008-09-05
1 vulnerabilities found