Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WinZip MIME解析缓冲区溢出漏洞
Vulnerability Description
WinZip是Windows平台下的解压缩工具。 WinZip中的函数在进行部分参数解析时存在问题，远程攻击者可以利用这个漏洞构建恶意压缩文档诱使用户处理，可能以WinZip进程权限在系统上执行任意指令。 问题存在于UUDeview包中，此功能用于支持多个解码函数，当提供超长字符串给部分MIME档((.mim， .uue， .uu， .b64， .bhx， .hqx和.xxe扩展)参数，WinZip会出现"internal error in file misc.c line 132"而崩溃。精心构建恶意压
CVSS Information
N/A
Vulnerability Type
N/A