CVE-2007-0264
NONE EPSS 48.4%
Published Jan 16, 200719y ago · Modified Jun 16, 20262w ago
Published Jan 16, 2007 19y ago
Last Modified Jun 16, 2026 2w ago
Description
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted input filenames, as in the case of a file upload application. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Threat Intelligence
EPSS Exploit Probability
48.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| winzip | winzip | 9.0 | any |
References 2
- osvdb.org http://osvdb.org/39800
- securityfocus.com http://www.securityfocus.com/bid/22020
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.