CVE-2005-2856

CVE-2005-2856 describes a stack-based buffer overflow in the WinACE UNACEV2.DLL used by many products (e.g., ALZip, Total Commander, IZArc, BitZipper, UltimateZip, etc.). The flaw occurs when extracting an ACE archive with an overly long filename, allowing user-assisted attackers to execute arbit...

CVE-2005-2856

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...

CVE-2005-2385

Vulnerability in avast! antivirus (UNACEV2.DLL) used for ACE archive handling. The issue is a stack-based buffer overflow due to improper boundary checking when scanning ACE files, which can be triggered by a long filename in an ACE archive. This leads to remote code execution with SYSTEM privile...

CVE-2005-2384

CVE-2005-2384 describes a directory traversal in a third‑party compression library (UNACEV2.DLL) used by Avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460. The vulnerability allows a remote attacker to write arbitrary files by supplying an ACE archive with filenames co...