CVE-2005-3051

Published: Sep 24, 2005Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.

Affected (3)

Products: Igor Pavlov: 7 Zip

Igor Pavlov

1 product

7 Zip

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Igor Pavlov 7 Zip	Version 3.13
Igor Pavlov 7 Zip	Version 4.23
Igor Pavlov 7 Zip	Version 4.26_beta

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (20)

http://marc.info/?l=bugtraq&m=112749134603258&w=2

Source: cve@mitre.org

http://secunia.com/advisories/16664/

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23004

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/secunia_research/2005-45/advisory/

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1017261

Source: cve@mitre.org

http://www.securityfocus.com/bid/14925

Source: cve@mitre.org

http://www.securityfocus.com/bid/21208

Source: cve@mitre.org

http://www.vuln.sg/turbosearcher330-en.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4603

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/30438

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=112749134603258&w=2