CVE-2005-2957

Published: Sep 16, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive.

Affected (1)

Products: Avira: Desktop

Avira

1 product

Desktop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Avira Desktop	Version 1.00.00.68

References (10)

http://marc.info/?l=bugtraq&m=112671128224841&w=2

Source: cve@mitre.org

http://secunia.com/advisories/16691/

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/secunia_research/2005-43/advisory/

Source: cve@mitre.org

PatchVendor Advisory

http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/14824

Source: cve@mitre.org

Patch

http://marc.info/?l=bugtraq&m=112671128224841&w=2