PT-2005-3892 · Conexware · Powerarchiver

Tan Chew Keong · Published 2005-09-27 · Updated 2016-10-18 · CVE-2005-3061

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PowerArchiver versions 8.10 through 9.5 Beta 5

Description The issue is related to multiple stack-based buffer overflows that can be triggered by a long filename in an archive. This can allow remote attackers to execute arbitrary code. The buffer overflows can occur when handling ACE or ARJ archives.

Recommendations For PowerArchiver versions 8.10 through 9.5 Beta 5, consider updating to a version that is not affected by this issue, as no specific fix is provided for these versions. As a temporary workaround, avoid using long filenames in ACE or ARJ archives to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-3061

Affected Products

Powerarchiver

References · 6

• http://secunia.com/secunia_research/2005-50/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3061 · Security Note
• http://securityfocus.com/bid/14922 · Patch
• http://secunia.com/advisories/16713 · Vendor Advisory
• http://securityreason.com/securityalert/23 · Note
• http://marc.info/?l=bugtraq&m=112748874211458&w=2 · Note