CVE-2003-1376

MEDIUM · CVSS 4.6 EPSS 0.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2003-1376

Severity

MEDIUM

CVSS

4.6

EPSS

0.24%

Original Filing — NVD Description

WinZip 8.0 uses weak random number generation for password protected ZIP files, which allows local users to brute force the encryption keys and extract the data from the zip file by guessing the state of the stream coder.