Vulnerability Details : CVE-2004-0333
Potential exploit
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
Vulnerability category: OverflowExecute code
Products affected by CVE-2004-0333
- cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:winzip:winzip:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:winzip:winzip:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:winzip:winzip:8.1:sr1:*:*:*:*:*:*
- cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*
- cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:uudeview:uudeview:0.5.18:*:*:*:*:*:*:*
- cpe:2.3:a:uudeview:uudeview:0.5.19:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-0333
59.14%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-0333
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
References for CVE-2004-0333
-
http://www.securityfocus.com/bid/9758
Exploit;Patch;Vendor Advisory
-
http://www.winzip.com/fmwz90.htm
Download WinZip Free and Open Zip Files on Windows 11/10
-
http://www.kb.cert.org/vuls/id/116182
VU#116182 - WinZip vulnerable to buffer overflow in handling of MIME archive parametersThird Party Advisory;US Government Resource
-
http://www.ciac.org/ciac/bulletins/o-092.shtml
-
http://secunia.com/advisories/11019
About Secunia Research | Flexera
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15336
WinZip UUDeview package MIME buffer overflow CVE-2004-0333 Vulnerability Report
-
http://secunia.com/advisories/10995
About Secunia Research | Flexera
-
http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/15490
UUDeview multiple buffer overflows undefined Vulnerability Report
-
http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true
U.S. | Let There Be Change | Accenture
-
http://www.osvdb.org/4119
404 Not Found
Jump to