CVE-2005-2856

Published: Sep 8, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.

Affected (1)

Products: Winace: Winace

Winace

1 product

Winace

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Winace Winace	Version 2.6.0.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (168)

http://marc.info/?l=bugtraq&m=112621008228458&w=2

Source: cve@mitre.org

http://secunia.com/advisories/16479

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19454

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19458

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19581

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19596

Source: cve@mitre.org

http://secunia.com/advisories/19612

Source: cve@mitre.org

http://secunia.com/advisories/19834

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19890

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19931

Source: cve@mitre.org

http://secunia.com/advisories/19938

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19939

Source: cve@mitre.org

http://secunia.com/advisories/19967

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19975

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19977

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20009

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20270

Source: cve@mitre.org

http://secunia.com/secunia_research/2005-41/advisory/

Source: cve@mitre.org

http://secunia.com/secunia_research/2006-24/advisory

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-25/advisory

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-27/

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-28/advisory

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-29/advisory/

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-30/advisory

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-32/advisory/

Source: cve@mitre.org

http://secunia.com/secunia_research/2006-33/advisory/

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-36/advisory

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-38/advisory

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2006-46/advisory/

Source: cve@mitre.org

http://secunia.com/secunia_research/2006-50/advisory/

Source: cve@mitre.org

http://securityreason.com/securityalert/49

Source: cve@mitre.org

http://securitytracker.com/id?1014863

Source: cve@mitre.org

http://securitytracker.com/id?1015852

Source: cve@mitre.org

http://securitytracker.com/id?1016011

Source: cve@mitre.org

http://securitytracker.com/id?1016012

Source: cve@mitre.org

http://securitytracker.com/id?1016065

Source: cve@mitre.org

http://securitytracker.com/id?1016066

Source: cve@mitre.org

http://securitytracker.com/id?1016088

Source: cve@mitre.org

http://securitytracker.com/id?1016114

Source: cve@mitre.org

http://securitytracker.com/id?1016115

Source: cve@mitre.org

http://securitytracker.com/id?1016177

Source: cve@mitre.org

http://securitytracker.com/id?1016257

Source: cve@mitre.org

http://securitytracker.com/id?1016512

Source: cve@mitre.org

http://www.osvdb.org/25129

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/432357/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/432579/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/433258/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/433352/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/433693/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434011/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434234/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434279/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/436639/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/440303/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/14759

Source: cve@mitre.org

http://www.securityfocus.com/bid/19884

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1565

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1577

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1611

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1681

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1694

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1725

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1775

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1797

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1835

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1836

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2047

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2184

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2824

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/3495

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26116

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26142

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26168

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26272

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26302

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26315

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26385

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26447

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26479

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26480

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26736

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26982

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27763

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/28787

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112621008228458&w=2