← voltar
CVE-2005-2856

CVE-2005-2856

28Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendepss 16%
da publicação à arma206 dias
Publicada no NVD8 de set.
1ª PoC+206d
probabilidade de exploração
16%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1633
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://marc.info/?l=bugtraq&m=112621008228458&w=2http://secunia.com/advisories/16479http://secunia.com/advisories/19454http://secunia.com/advisories/19458http://secunia.com/advisories/19581http://secunia.com/advisories/19596http://secunia.com/advisories/19612http://secunia.com/advisories/19834http://secunia.com/advisories/19890http://secunia.com/advisories/19931http://secunia.com/advisories/19938http://secunia.com/advisories/19939