Lucene search
HistorySep 27, 2005 - 7:03 p.m.
CVE-2005-3061
cve
buffer overflow
powerarchiver
security vulnerability
remote code execution
ace
arj
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
Multiple stack-based buffer overflows in PowerArchiver 8.10 through 9.5 Beta 4 and Beta 5 allow remote attackers to execute arbitrary code via a long filename in a (1) ACE or (2) ARJ archive.
Affected configurations
Node
powerarchiverpowerarchiver_2002Match8.10
ORpowerarchiverpowerarchiver_2003Match8.60
ORpowerarchiverpowerarchiver_2004Match9.25
ORpowerarchiverpowerarchiver_2006Match9.5_beta_4
ORpowerarchiverpowerarchiver_2006Match9.5_beta_5
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.086 Low
EPSS
Percentile
94.5%
Related for CVE-2005-3061