CVE-2005-3194 - Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remo

CVE-2005-3194

Summary

Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long filename in a compressed (1) ALZ, (2) ARJ, (3) ZIP, (4) UUE, or (5) XXE archive.

References

Vulnerable Configurations

cpe:2.3:a:estsoft:alzip:5.52_english:*:*:*:*:*:*:*
cpe:2.3:a:estsoft:alzip:5.52_english:*:*:*:*:*:*:*
cpe:2.3:a:estsoft:alzip:6.1_international:*:*:*:*:*:*:*
cpe:2.3:a:estsoft:alzip:6.1_international:*:*:*:*:*:*:*
cpe:2.3:a:estsoft:alzip:6.12_korean:*:*:*:*:*:*:*
cpe:2.3:a:estsoft:alzip:6.12_korean:*:*:*:*:*:*:*

CVSS

Base:	5.1 (as of 11-07-2017 - 01:33)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:H/Au:N/C:P/I:P/A:P

refmap via4

bid	15010
misc	http://secunia.com/secunia_research/2005-49/advisory/
osvdb	19889 19890
sectrack	1015003
secunia	16847
xf	alzip-filename-bo(22526)

Last major update

11-07-2017 - 01:33

Published

14-10-2005 - 10:02

Last modified

11-07-2017 - 01:33