CVE-2004-0333

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-11-23 · updated 2026-06-16

Description

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

Affected products

gentoo Linux: 1.4, 1.4-rc1, 1.4-rc2, 1.4-rc3
Openpkg: all versions
Uudeview: 0.5.18, 0.5.19
WinZip Computing WinZip: 7.0, 8.0, 8.1, 8.1-sr1

References

http://secunia.com/advisories/10995
http://secunia.com/advisories/11019
http://www.ciac.org/ciac/bulletins/o-092.shtml
http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true
http://www.kb.cert.org/vuls/id/116182
http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html
http://www.osvdb.org/4119
http://www.securityfocus.com/bid/9758
http://www.winzip.com/fmwz90.htm
https://exchange.xforce.ibmcloud.com/vulnerabilities/15336
https://exchange.xforce.ibmcloud.com/vulnerabilities/15490
http://secunia.com/advisories/10995

Get alerted when CVE-2004-0333 or the next vulnerability affects your stack