Lucene search

[email protected]CVE-2006-3985

HistoryAug 05, 2006 - 12:04 a.m.

CVE-2006-3985

2006-08-0500:04:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2006-3985

stack-based buffer overflow

dzips32.dll

conexware powerarchiver

zip archive

arbitrary code execution

nvd

8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.8%

JSON

Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name.

CPENameOperatorVersion
conexware:powerarchiverconexware powerarchivereq8.10
conexware:powerarchiverconexware powerarchiverle9.62.03
conexware:powerarchiverconexware powerarchivereq8.60
conexware:powerarchiverconexware powerarchivereq9.5_beta_4
conexware:powerarchiverconexware powerarchivereq9.5_beta_5
conexware:powerarchiverconexware powerarchivereq9.25

CPE	Name	Operator	Version
conexware:powerarchiver	conexware powerarchiver	eq	8.10
conexware:powerarchiver	conexware powerarchiver	le	9.62.03
conexware:powerarchiver	conexware powerarchiver	eq	8.60
conexware:powerarchiver	conexware powerarchiver	eq	9.5_beta_4
conexware:powerarchiver	conexware powerarchiver	eq	9.5_beta_5
conexware:powerarchiver	conexware powerarchiver	eq	9.25

References

secunia.com/advisories/21199

securityreason.com/securityalert/1334

securitytracker.com/id?1016579

vuln.sg/powarc962-en.html

www.osvdb.org/27492

www.powerarchiver.com/blog/

www.securityfocus.com/archive/1/441205/100/100/threaded

www.securityfocus.com/bid/19143

www.vupen.com/english/advisories/2006/2971

exchange.xforce.ibmcloud.com/vulnerabilities/27939

8 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.8%

JSON

Related for CVE-2006-3985

prion1 nessus1 cve1