GCVE - cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

Vendor	Winzip (`91e521c4-9f6d-5911-b2bf-93a40394bca5`)
Product	Winzip (`638a7dd0-c90b-56f6-b883-61ff41af48a6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-3442`	vulnerable	2026-06-08 04:50:34.712779	Details available WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. Published: 2008-08-01T14:00:00.000Z Updated: 2024-09-16T19:31:43.471Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1020581 http://www.infobyte.com.ar/down/Francisco%20Amato%20-%20evilgrade%20-%20ENG.pdf http://www.infobyte.com.ar/down/isr-evilgrade-1.0.0.tar.gz http://archives.neohapsis.com/archives/bugtraq/2008-07/0250.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3890`	vulnerable	2026-06-08 04:49:10.407849	Details available Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198. Published: 2006-11-21T22:00:00.000Z Updated: 2024-08-07T18:48:39.422Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/225217 http://secunia.com/advisories/22891 http://www.securityfocus.com/bid/21060 http://www.securityfocus.com/archive/1/451566/100/0/threaded https://www.exploit-db.com/exploits/2785	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1465`	vulnerable	2026-06-08 04:47:54.251722	Details available Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line. Published: 2005-02-13T05:00:00.000Z Updated: 2024-08-08T00:53:24.085Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=109416099301369&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/17197 http://www.securityfocus.com/bid/11092 https://exchange.xforce.ibmcloud.com/vulnerabilities/17192 http://www.winzip.com/wz90sr1.htm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0333`	vulnerable	2026-06-08 04:47:49.432583	Details available Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters. Published: 2004-03-18T05:00:00.000Z Updated: 2024-08-08T00:17:14.219Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15490 http://www.osvdb.org/4119 http://www.securityfocus.com/bid/9758 http://secunia.com/advisories/10995 http://www.ciac.org/ciac/bulletins/o-092.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1376`	vulnerable	2026-06-08 04:47:47.441325	Details available WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder. Published: 2007-10-19T10:00:00.000Z Updated: 2024-08-08T02:28:02.787Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/311059 http://www.securityfocus.com/bid/6805 https://exchange.xforce.ibmcloud.com/vulnerabilities/11296 http://securityreason.com/securityalert/3265	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2001-0449`	vulnerable	2026-06-08 04:45:20.283998	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.