NVD

Id
71002  
Name
CVE-2004-0575  
Description
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-11-03  
Modified Date
2017-07-10  
Seq
2004-0575  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
366523 71002 CVE-2004-0575 20041013 EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability  View
366524 71002 CVE-2004-0575 oval:org.mitre.oval:def:1053  View
366525 71002 CVE-2004-0575 oval:org.mitre.oval:def:3913  View
366526 71002 CVE-2004-0575 oval:org.mitre.oval:def:4276  View
366527 71002 CVE-2004-0575 oval:org.mitre.oval:def:6397  View
366528 71002 CVE-2004-0575 1011637  View
366529 71002 CVE-2004-0575 P-010  View
366530 71002 CVE-2004-0575 http://www.eeye.com/html/research/advisories/AD20041012A.html  View
366531 71002 CVE-2004-0575 VU#649374  View
366532 71002 CVE-2004-0575 MS04-034  View
366533 71002 CVE-2004-0575 win-compressed-folders-bo(17624)  View
366534 71002 CVE-2004-0575 win-ms04034-patch(17659)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63100 JVNDB-2004-000442 Microsoft Windows の不正な zip ファイルの処理によるバッファオーバーフローの脆弱性 Microsoft Windows には、zip 形式の圧縮ファイルを処理する際に、圧縮されているファイル名の長さを適切にチェックしないため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0575 9002 CVE-2004-0575 71002 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000442.html 2004-10-13 2007-04-01 View