Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WinZip Update 代码注入漏洞
Vulnerability Description
WinZip 是一款功能强大并且易用的压缩实用程序, 支持多种压缩文件格式。 WinZip 11.0之前的版本没有正确地校验更新的真实性，导致恶意代码注入漏洞。通过中间人攻击方式，可以利用此漏洞在升级中利用包含木马的更新，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A