Buffer Overflow Vulnerability in Unace by ACE Team
CVE-2005-0160

Currently unrated

Key Information:

Vendor

E-merge

Status
Unace
Vendor
CVE Published:
22 February 2005

What is CVE-2005-0160?

Unace 1.2b is susceptible to multiple buffer overflow vulnerabilities which can be exploited by attackers to execute arbitrary code. The vulnerabilities arise from two distinct overflow issues within ACE archives, the handling of excessively long command line arguments, and processing specific 'Ready for next volume' messages. Proper security measures must be taken to mitigate the risk associated with these overflow vulnerabilities.

References

http://www.kb.cert.org/vuls/id/215006
third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/bid/12630
vdb-entryx_refsource_BID
http://secunia.com/advisories/14359
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.