CVE-2001-0449

Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2001-06-27

Last modified

2024-08-08

Affected products

• Winzip (Winzip)

References

• http://www.securityfocus.com/archive/1/166211
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6191