FortiClient VulnerabilitySecurity Vulnerability CVE-2008-3442 for WinZip
Description
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Affected Applications
WinZip
CVE References
CVE-2008-3442Other References
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3442| ID | 2570 |
| Created | May 12, 2021 |
| Description Updated |
Sep 14, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Windows |
| Vendor | Corel Corporation |
| Patch | manual |
| Application | WinZip |