CVE-2003-1376

NONE EPSS 15.0%

Published Dec 31, 200322y ago · Modified Jun 16, 20262w ago

Published Dec 31, 2003 22y ago

Last Modified Jun 16, 2026 2w ago

Description

WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.

Threat Intelligence

EPSS Exploit Probability

15.0% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-255

Affected Products 1

Vendor	Product	Version	Range
winzip	winzip	8.0	any

References 4

securityreason.com http://securityreason.com/securityalert/3265
securityfocus.com http://www.securityfocus.com/archive/1/311059

Exploit
securityfocus.com http://www.securityfocus.com/bid/6805
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/11296

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.