← back
CVE-2005-2856

CVE-2005-2856

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 16%
from disclosure to weapon206 days
Published on NVDSep 8
1st PoC+206d
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1633
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=112621008228458&w=2http://secunia.com/advisories/16479http://secunia.com/advisories/19454http://secunia.com/advisories/19458http://secunia.com/advisories/19581http://secunia.com/advisories/19596http://secunia.com/advisories/19612http://secunia.com/advisories/19834http://secunia.com/advisories/19890http://secunia.com/advisories/19931http://secunia.com/advisories/19938http://secunia.com/advisories/19939