cbcvebase.
CVE-2007-0264
published 2007-01-16

CVE-2007-0264: Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a…

PriorityP422medium6.6CVSS 2.0
AVLACMAuSCCICAC
EXPLOIT
EPSS
0.69%
48.3th percentile
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted input filenames, as in the case of a file upload application. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Affected

1 ranges
VendorProductVersion rangeFixed in
winzipwinzip——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.