Lucene search

K
kasperskyKaspersky LabKLA10311
HistorySep 08, 2005 - 12:00 a.m.

KLA10311 ACE vulnerability in multiple software

2005-09-0800:00:00
Kaspersky Lab
threats.kaspersky.com
14

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.2%

Detect date:

09/08/2005

Severity:

Critical

Description:

A buffer overflow was found in the WinACE compression utility, which is used in multiple products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE filename.

Affected products:

WinACE versions 2.6 beta 5 and earlier

Solution:

Update to latest version

Impacts:

ACE

Related products:

WinAce

CVE-IDS:

CVE-2005-28567.5Critical

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.2%