CVEvulnerability
CVE-2003-1376
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.
Affected configurations
• winzip winzip 8.0
Related
Weakness · not in database (1)
References
- http://securityreason.com/securityalert/3265 securityreason.com
- http://www.securityfocus.com/archive/1/311059 Exploit
- http://www.securityfocus.com/bid/6805 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11296 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/3265 securityreason.com
- http://www.securityfocus.com/archive/1/311059 Exploit
- http://www.securityfocus.com/bid/6805 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11296 exchange.xforce.ibmcloud.com