Lucene search
HistoryJul 27, 2005 - 4:00 a.m.
CVE-2005-2385
cve-2005-2385
buffer overflow
unacev2.dll
avast! antivirus
ace archive
remote code execution
vulnerability
8.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.053 Low
EPSS
Percentile
93.0%
Buffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to execute arbitrary code via an ACE archive containing a long filename.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alwil:avast_antivirus | alwil avast antivirus | eq | 4.6.665 |
| alwil:avast_antivirus | alwil avast antivirus | eq | 4.6.460 |
Related
checkpoint_advisories
checkpoint_advisories
avast! Antivirus ACE File Handling Buffer Overflow (CVE-2005-2385)
2010-07-15 00:00:00
8.1 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.053 Low
EPSS
Percentile
93.0%
Related for CVE-2005-2385