// For flags

CVE-2004-0333

WinZip - MIME Parsing Overflow

Severity Score

10.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2004-03-17 CVE Reserved
  • 2004-03-18 CVE Published
  • 2004-04-15 First Exploit
  • 2024-08-08 CVE Updated
  • 2024-08-27 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Openpkg
Search vendor "Openpkg"
Openpkg
Search vendor "Openpkg" for product "Openpkg"
*-
Affected
Uudeview
Search vendor "Uudeview"
Uudeview
Search vendor "Uudeview" for product "Uudeview"
0.5.18
Search vendor "Uudeview" for product "Uudeview" and version "0.5.18"
-
Affected
Uudeview
Search vendor "Uudeview"
Uudeview
Search vendor "Uudeview" for product "Uudeview"
0.5.19
Search vendor "Uudeview" for product "Uudeview" and version "0.5.19"
-
Affected
Winzip
Search vendor "Winzip"
Winzip
Search vendor "Winzip" for product "Winzip"
7.0
Search vendor "Winzip" for product "Winzip" and version "7.0"
-
Affected
Winzip
Search vendor "Winzip"
Winzip
Search vendor "Winzip" for product "Winzip"
8.0
Search vendor "Winzip" for product "Winzip" and version "8.0"
-
Affected
Winzip
Search vendor "Winzip"
Winzip
Search vendor "Winzip" for product "Winzip"
8.1
Search vendor "Winzip" for product "Winzip" and version "8.1"
-
Affected
Winzip
Search vendor "Winzip"
Winzip
Search vendor "Winzip" for product "Winzip"
8.1
Search vendor "Winzip" for product "Winzip" and version "8.1"
sr1
Affected
Gentoo
Search vendor "Gentoo"
Linux
Search vendor "Gentoo" for product "Linux"
1.4
Search vendor "Gentoo" for product "Linux" and version "1.4"
-
Affected
Gentoo
Search vendor "Gentoo"
Linux
Search vendor "Gentoo" for product "Linux"
1.4
Search vendor "Gentoo" for product "Linux" and version "1.4"
rc1
Affected
Gentoo
Search vendor "Gentoo"
Linux
Search vendor "Gentoo" for product "Linux"
1.4
Search vendor "Gentoo" for product "Linux" and version "1.4"
rc2
Affected
Gentoo
Search vendor "Gentoo"
Linux
Search vendor "Gentoo" for product "Linux"
1.4
Search vendor "Gentoo" for product "Linux" and version "1.4"
rc3
Affected