PT-2005-3892 · Conexware · Powerarchiver

Tan Chew Keong · Publicado 2005-09-27 · Atualizado 2016-10-18 · CVE-2005-3061

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PowerArchiver versions 8.10 through 9.5 Beta 5

Description The issue is related to multiple stack-based buffer overflows that can be triggered by a long filename in an archive. This can allow remote attackers to execute arbitrary code. The buffer overflows can occur when handling ACE or ARJ archives.

Recommendations For PowerArchiver versions 8.10 through 9.5 Beta 5, consider updating to a version that is not affected by this issue, as no specific fix is provided for these versions. As a temporary workaround, avoid using long filenames in ACE or ARJ archives to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3061

Produtos afetados

Powerarchiver

Referências · 6

• http://secunia.com/secunia_research/2005-50/advisory · Aviso do Fabricante
• http://securityreason.com/securityalert/23 · Nota
• http://marc.info/?l=bugtraq&m=112748874211458&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3061 · Nota de Segurança
• http://securityfocus.com/bid/14922 · Correção
• http://secunia.com/advisories/16713 · Aviso do Fabricante