CVE-2004-0575: Microsoft Windows 2003 Server

High severity, CVSS 10.0. EPSS: 60.3% chance of exploitation in the next 30 days.

Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.

Affected products

• Microsoft Windows 2003 Server: version 64-bit only; version r2 only
• Microsoft Windows XP: any version

Published 2004-11-03. Last modified 2026-06-16.