PT-2005-3803 · Avira · Avira Desktop For Windows+1

Tan Chew Keong · Publicado 2005-09-16 · Atualizado 2016-10-18 · CVE-2005-2957

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AVIRA Desktop for Windows version 1.00.00.68 with AVPACK32.DLL version 6.31.0.3

Description The issue is a stack-based buffer overflow that occurs when archive scanning is enabled, allowing remote attackers to execute arbitrary code via a long filename in an ACE archive.

Recommendations For AVIRA Desktop for Windows version 1.00.00.68 with AVPACK32.DLL version 6.31.0.3, consider disabling archive scanning until a patch is available. Restrict access to the AVPACK32.DLL module to minimize the risk of exploitation. Avoid using long filenames in ACE archives to prevent potential buffer overflow attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2957

Produtos afetados

Avira Desktop For Windows

Avpack32.Dll

Referências · 6

• http://avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=112671128224841&w=2 · Nota
• http://securityfocus.com/bid/14824 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-2957 · Nota de Segurança
• http://secunia.com/advisories/16691 · Aviso do Fabricante
• http://secunia.com/secunia_research/2005-43/advisory · Aviso do Fabricante