CVE-2005-3831

Опубликовано: 26 нояб. 2005

Источник: nvd

CVSS2: 5.1

EPSS Низкий

Описание

Stack-based buffer overflow in (1) CxZIP60.dll and (2) CxZIP60u.dll, as used in SpeedProject products including (a) ZipStar 5.0 Build 4285, (b) Squeez 5.0 Build 4285, and (c) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename.

Ссылки

http://secunia.com/advisories/17420
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-60/advisory
Patch
Vendor Advisory
http://securitytracker.com/id?1015265
Patch
Vendor Advisory
http://securitytracker.com/id?1015266
Patch
Vendor Advisory
http://securitytracker.com/id?1015267
Patch
Vendor Advisory
http://www.osvdb.org/21073
http://www.securityfocus.com/archive/1/417588/30/0/threaded
http://www.vupen.com/english/advisories/2005/2570
Vendor Advisory
http://secunia.com/advisories/17420
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-60/advisory
Patch
Vendor Advisory
http://securitytracker.com/id?1015265
Patch
Vendor Advisory
http://securitytracker.com/id?1015266
Patch
Vendor Advisory
http://securitytracker.com/id?1015267
Patch
Vendor Advisory
http://www.osvdb.org/21073
http://www.securityfocus.com/archive/1/417588/30/0/threaded
http://www.vupen.com/english/advisories/2005/2570
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:speedproject:speedcommander:10.51_build4430:*:*:*:*:*:*:*

cpe:2.3:a:speedproject:speedcommander:11.0_build4430:*:*:*:*:*:*:*

cpe:2.3:a:speedproject:squeez:5.0_build_4285:*:*:*:*:*:*:*

cpe:2.3:a:speedproject:zipstar:5.0_build_4285:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01899

Низкий

5.1 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-j4rh-674v-8884

github

почти 4 года назад