#Winzip download 9.0 Patch#

#Winzip download 9.0 Patch#

Applying a patch is able to eliminate this problem. It is assigned to the family Windows and running in the context local. The vulnerability scanner Nessus provides a plugin with the ID 17362 (WinZip <= 9.0 Multiple Unspecified Overflows), which helps to determine the existence of the flaw in a target environment. As 0-day the estimated underground price was around $5k-$25k. It is possible to download the exploit at. Technical details are unknown but a public exploit is available. No form of authentication is required for a successful exploitation. The attack can only be done within the local network. This vulnerability was named CVE-2004-1465 since. The weakness was published with WinZip Team (Website). As an impact it is known to affect confidentiality, integrity, and availability.

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. The CWE definition for the vulnerability is CWE-119. The manipulation with an unknown input leads to a memory corruption vulnerability. This vulnerability affects an unknown functionality of the component Command Line Argument Handler. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability classified as critical was found in WinZip 7.0/8.0/8.1/9.0 ( File Compression Software). The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time.

Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.