Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1465. PoCs published by ATmaCA.
AI-analyzed exploit summary This exploit leverages a local buffer overflow in WinZip 8.1 via a crafted .tmp file and command-line arguments to execute arbitrary shellcode, launching cmd.exe. The shellcode is hardcoded with a WinXP SP2-specific address for system() and a JMP ESP instruction.
Description
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
Exploits (1)
This exploit leverages a local buffer overflow in WinZip 8.1 via a crafted .tmp file and command-line arguments to execute arbitrary shellcode, launching cmd.exe. The shellcode is hardcoded with a WinXP SP2-specific address for system() and a JMP ESP instruction.