CVE-2004-0575

Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote…

published October 16, 2004

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
60%
Percentile
99.1
In the wild
Unconfirmed
What it is

⚠️ This sneaky integer overflow is hiding in DUNZIP32.DLL, and it could let attackers execute arbitrary code via compressed folders! Think of it like a delivery service accepting an oversized package without checking the dimensions — it just pushes through, which could lead to some serious chaos at your doorstep! 📦 An attacker could exploit this vulnerability to run malicious code on your system, potentially compromising your data or system integrity. It’s a little like inviting an untrusted guest into your home, who might just decide to have a free-for-all with your belongings!

Put simply

Think of it like a delivery service accepting an oversized package without checking the dimensions — it just pushes through, which could lead to some serious chaos at your doorstep! 📦 The vulnerability arises from an unchecked buffer in the DUNZIP32.DLL component, which mismanages lengths in compressed files, allowing attackers to execute code remotely when they send specially crafted zip files.

What to do

An attacker could exploit this vulnerability to run malicious code on your system, potentially compromising your data or system integrity. It’s a little like inviting an untrusted guest into your home, who might just decide to have a free-for-all with your belongings! To protect yourself, ensure that your systems are updated with the latest security patches. Regularly audit your file handling practices and only accept zip files from trusted sources. Consider disabling or restricting the use of DUNZIP32.DLL if it’s not necessary for your operations. You’ve got this! Follow these steps, and your systems will be safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.60300 · 99.1th percentile
Published
2004-10-16T04:00Z
EPSS history
Timeline
  • 16 OCT 04:00Z
    Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote…
    cvelistv5