CVE-2025-1240

>= 18.0 and < 18.0.16371

WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exec

8.8HIGH

CVE-2024-8811

< 76.8

WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection m

7.8HIGH

CVE-2008-3442

all versions

WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbit

CVE-2007-0264

all versions

Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly exe

CVE-2006-6884

all versions

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Bu

CVE-2006-3890

<= 10.0

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain ot

CVE-2006-5198

all versions

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 all

CVE-2004-1465

all versions

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including

CVE-2004-0333

all versions

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote

CVE-2004-0235

all versions

Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LH

CVE-2004-0234

all versions

Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda S

CVE-2003-1376

all versions

WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryp

CVE-2002-0370

all versions

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitr

CVE-2001-0449

all versions

Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipand