CVE-2004-1465: Winzip

Low severity, CVSS 3.7. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.

Affected products

• Winzip Winzip: version 7.0 only; version 8.0 only; version 8.1 only; version 9.0 only

Published 2004-12-31. Last modified 2026-06-16.