Lucene search
HistoryJul 27, 2005 - 4:00 a.m.
CVE-2005-2385
cve-2005-2385
buffer overflow
unacev2.dll
avast! antivirus
ace archive
remote code execution
vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.053 Low
EPSS
Percentile
93.1%
Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename.
Affected configurations
Node
alwilavast_antivirusMatch4.6.460server
ORalwilavast_antivirusMatch4.6.665home
ORalwilavast_antivirusMatch4.6.665pro
| CPE | Name | Operator | Version |
|---|---|---|---|
| alwil:avast_antivirus | alwil avast antivirus | eq | 4.6.460 |
| alwil:avast_antivirus | alwil avast antivirus | eq | 4.6.665 |
Related
checkpoint_advisories
checkpoint_advisories
avast! Antivirus ACE File Handling Buffer Overflow (CVE-2005-2385)
2010-07-15 00:00:00
nvd
nvd
CVE-2005-2385
2005-07-27 04:00:00
cvelist
cvelist
CVE-2005-2385
2005-07-27 04:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.053 Low
EPSS
Percentile
93.1%
Related for CVE-2005-2385