| Vulnerability Name: | CVE-2004-0333 (CCN-15336) | ||||||||
| Assigned: | 2004-02-27 | ||||||||
| Published: | 2004-02-27 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters. This was fixed in WinZip 8.1 SR-2 in March of 2004. You can find more information on the subject on the following pages of the winzip site: http://www.winzip.com/wz81sr2.htm http://www.winzip.com/fmwz90.htm | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2004-0333 Source: CCN Type: SA10995 WinZip MIME Archive Parsing Buffer Overflow Vulnerability Source: SECUNIA Type: UNKNOWN 10995 Source: CCN Type: SA11019 UUDeview Parameter Parsing Buffer Overflow Vulnerability Source: SECUNIA Type: UNKNOWN 11019 Source: CCN Type: CIAC Information Bulletin O-092 WinZip Vulnerable to Buffer Overflow in Handling of MIME Archive Parameters Source: CIAC Type: UNKNOWN O-092 Source: CCN Type: UUDeview Web page UUDeview Home Page Source: CCN Type: GLSA-200403-05 UUDeview MIME Buffer Overflow Source: CCN Type: iDEFENSE Security Advisory 02.27.04: WinZip MIME Parsing Buffer Overflow Vulnerability Source: IDEFENSE Type: UNKNOWN 20040227 WinZip MIME Parsing Buffer Overflow Vulnerability Source: CCN Type: US-CERT VU#116182 WinZip vulnerable to buffer overflow in handling of MIME archive parameters Source: CERT-VN Type: Third Party Advisory, US Government Resource VU#116182 Source: CCN Type: GLSA 200403-05 UUDeview MIME Buffer Overflow Source: CONFIRM Type: UNKNOWN http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html Source: OSVDB Type: UNKNOWN 4119 Source: CCN Type: OSVDB ID: 4076 WinZip MIME Archive Parsing Overflow Source: CCN Type: OSVDB ID: 4119 UUDeview Parameter Parsing Overflow Source: CCN Type: SecuriTeam Mailing List, Security Holes & Exploits 18 Apr 2004 WinZip MIME Parsing Buffer Overflow Exploit Source: BID Type: Exploit, Patch, Vendor Advisory 9758 Source: CCN Type: BID-9758 UUDeview MIME Archive Buffer Overrun Vulnerability Source: CCN Type: WinZip Web site WinZip home page Source: CONFIRM Type: UNKNOWN http://www.winzip.com/fmwz90.htm Source: XF Type: UNKNOWN winzip-mime-bo(15336) Source: XF Type: UNKNOWN winzip-mime-bo(15336) Source: XF Type: UNKNOWN uudeview-multiple-bo(15490) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||