CVE-2005-3061 - Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remo

CVE-2005-3061

Summary

Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive.

References

Vulnerable Configurations

cpe:2.3:a:powerarchiver:powerarchiver_2002:8.10:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2002:8.10:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2003:8.60:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2003:8.60:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2004:9.25:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2004:9.25:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2006:9.5_beta_4:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2006:9.5_beta_4:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2006:9.5_beta_5:*:*:*:*:*:*:*
cpe:2.3:a:powerarchiver:powerarchiver_2006:9.5_beta_5:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 18-10-2016 - 03:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	14922
bugtraq	20050923 Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer
misc	http://secunia.com/secunia_research/2005-50/advisory/
secunia	16713
sreason	23

Last major update

18-10-2016 - 03:32

Published

27-09-2005 - 19:03

Last modified

18-10-2016 - 03:32