4.6
CVE-2003-1376
- EPSS 0.24%
- Veröffentlicht 31.12.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:04:02
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.148 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
http://securityreason.com/securityalert/3265
http://www.securityfocus.com/archive/1/311059
http://www.securityfocus.com/bid/6805
https://exchange.xforce.ibmcloud.com/vulnerabilities/11296