Lucene search

K
cve[email protected]CVE-2005-2903
HistorySep 14, 2005 - 8:03 p.m.

CVE-2005-2903

2005-09-1420:03:00
web.nvd.nist.gov
25
cve-2005-2903
nod32
buffer overflow
remote code execution
arj archive
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.086 Low

EPSS

Percentile

94.5%

Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename.

Affected configurations

NVD
Node
eset_softwarenod32_antivirusMatch2.5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.086 Low

EPSS

Percentile

94.5%