CVE-2004-0333

NONE EPSS 97.6%

Published Nov 23, 200421y ago · Modified Jun 16, 20262w ago

Published Nov 23, 2004 21y ago

Last Modified Jun 16, 2026 2w ago

Description

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

Threat Intelligence

EPSS Exploit Probability

97.6% percentile

Exploit & Patch Status

Public Exploit Known

Patch Available

Affected Products 11

Vendor	Product	Version	Range
openpkg	openpkg	*	any
uudeview	uudeview	0.5.18	any
uudeview	uudeview	0.5.19	any
winzip	winzip	7.0	any
winzip	winzip	8.0	any
winzip	winzip	8.1	any
winzip	winzip	8.1	any
gentoo	linux	1.4	any
gentoo	linux	1.4	any
gentoo	linux	1.4	any
gentoo	linux	1.4	any

References 11

secunia.com http://secunia.com/advisories/10995
secunia.com http://secunia.com/advisories/11019
ciac.org http://www.ciac.org/ciac/bulletins/o-092.shtml
idefense.com http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true
kb.cert.org http://www.kb.cert.org/vuls/id/116182

Third Party AdvisoryUS Government Resource
openpkg.org http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html
osvdb.org http://www.osvdb.org/4119
securityfocus.com http://www.securityfocus.com/bid/9758

ExploitPatchVendor Advisory
winzip.com http://www.winzip.com/fmwz90.htm
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/15336
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/15490

Remediation

securityfocus.com http://www.securityfocus.com/bid/9758

ExploitPatchVendor Advisory