CVE-2005-2856 : 상세 정보

CVE-2005-2856

21.56%V4
2005-09-08
04h00 +00:00
Overflow
Network
2024-08-07
22h53 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

메트릭

메트릭 점수 심각도 CVSS 벡터 출처
V2 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P nvd@nist.gov

EPSS

EPSS는 취약점이 악용될 가능성을 예측하는 점수 모델입니다.

EPSS 점수

EPSS 모델은 0과 1(0~100%) 사이의 확률 점수를 생성합니다. 점수가 높을수록 취약점이 악용될 가능성이 높습니다.

EPSS 백분위수

백분위수는 EPSS 점수에 따라 CVE의 순위를 매기는 데 사용됩니다. 예를 들어 EPSS 점수 기준 95번째 백분위수의 CVE는 다른 CVE의 95%보다 악용될 가능성이 높습니다.

익스플로잇 정보

Exploit Database EDB-ID : 1633

게시일 : 2006-04-01 22h00 +00:00
저자 : darkeagle
EDB 검증됨 : Yes

언급된 제품

구성 0

Winace>>Winace >> Version 2.6.0.0

참고 자료

http://securitytracker.com/id?1016512
Tags : vdb-entry, x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/2824
Tags : vdb-entry, x_refsource_VUPEN
http://securityreason.com/securityalert/49
Tags : third-party-advisory, x_refsource_SREASON
http://www.securityfocus.com/bid/19884
Tags : vdb-entry, x_refsource_BID
http://www.vupen.com/english/advisories/2006/1797
Tags : vdb-entry, x_refsource_VUPEN
http://securitytracker.com/id?1014863
Tags : vdb-entry, x_refsource_SECTRACK
http://securitytracker.com/id?1016011
Tags : vdb-entry, x_refsource_SECTRACK
http://securitytracker.com/id?1016115
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/19939
Tags : third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1016065
Tags : vdb-entry, x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/1835
Tags : vdb-entry, x_refsource_VUPEN
http://securitytracker.com/id?1016088
Tags : vdb-entry, x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2006/3495
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/19967
Tags : third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1016177
Tags : vdb-entry, x_refsource_SECTRACK
http://securitytracker.com/id?1016114
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/19931
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19975
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1775
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/16479
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1611
Tags : vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/1681
Tags : vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/2184
Tags : vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/1577
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/19938
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19581
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1694
Tags : vdb-entry, x_refsource_VUPEN
http://secunia.com/advisories/20270
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19890
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19977
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/19596
Tags : third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1016066
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/19458
Tags : third-party-advisory, x_refsource_SECUNIA
http://securitytracker.com/id?1016012
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/19454
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.osvdb.org/25129
Tags : vdb-entry, x_refsource_OSVDB
http://secunia.com/advisories/19834
Tags : third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/20009
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/2047
Tags : vdb-entry, x_refsource_VUPEN
http://www.securityfocus.com/bid/14759
Tags : vdb-entry, x_refsource_BID
http://www.vupen.com/english/advisories/2006/1836
Tags : vdb-entry, x_refsource_VUPEN
http://securitytracker.com/id?1016257
Tags : vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/19612
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/1565
Tags : vdb-entry, x_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/1725
Tags : vdb-entry, x_refsource_VUPEN
http://securitytracker.com/id?1015852
Tags : vdb-entry, x_refsource_SECTRACK
http://marc.info/?l=bugtraq&m=112621008228458&w=2
Tags : mailing-list, x_refsource_BUGTRAQ