2

I've recently requested a WinZip v22 with command line installation on a Windows POC/Dev server that we're using to pilot an application that is written in .Net.

In the application there is functionality that hooks into WinZip using:

ProcessStartInfo("c:\winzip.exe")

When a request was made to install WinZip 22 on the server, an inquiry was made as to whether this would pose a security vulnerability.

I searched CVE Details and Mitre but the last issue seems to be in 2008.

Thanks in advance for any insight on this.

  • So to be clear, your question is: Will installing WinZip 22 on a server create a security vulnerability? – Limit Jun 14 '18 at 16:46
1

No if you patch Winzip frequently.

Yes if you don't patch it.

This answer applies to all software on a server not just Winzip. Only put software on a server that is required in order to reduce risk and attack surface.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.