CVE-2007-0264: Buffer Overflow
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line argument. NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted input filenames, as in the case of a file upload application. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0264?
CVE-2007-0264 is classified as a medium severity vulnerability due to its potential to cause application crashes and arbitrary code execution.
How do I fix CVE-2007-0264?
To fix CVE-2007-0264, upgrade WinZip to a version that is not susceptible to this buffer overflow vulnerability.
Who is affected by CVE-2007-0264?
Local users running WinZip 9.0 are affected by CVE-2007-0264, particularly if they utilize long command line arguments.
What are the risks associated with CVE-2007-0264?
The risks of CVE-2007-0264 include application crashes and the potential for attackers to execute arbitrary code on affected systems.
Is CVE-2007-0264 a remote exploit?
No, CVE-2007-0264 requires local access to the system to exploit the buffer overflow.