CVE-2007-2535

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

Code injection

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-2535

CVE-2007-2535 affects WinAce. A ZOO archive containing a direntry that points to a previous file can cause a remote denial-of-service via an infinite loop. The available documents confirm the vulnerability is a DoS condition with no public details on exploit vectors, affected versions, or fixes. ...

CVE-2007-2535

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2007-2535: Undefined Security Weakness

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2006-0981

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

Directory traversal

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0981

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0981

CVE-2006-0981 describes a directory traversal in e-merge WinAce 2.6 and earlier, where improper handling of archived file paths in TAR (and ZIP) archives allows remote attackers to create or overwrite arbitrary files. CPAI advisory adds that exploitation may lead to code execution depending on lo...

CVE-2006-0981: Undefined Security Weakness

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

Heap overflow

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

CVE-2006-0813

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

CVE-2006-0813

CVE-2006-0813 describes a heap-based buffer overflow in WinACE 2.60 triggered by a large ARJ header block. The underlying issue is a boundary/heap buffer handling error when reading an oversized ARJ header, allowing a user-assisted attacker to execute arbitrary code when a malicious ARJ archive i...

CVE-2006-0813

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

Secunia Research: WinACE ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/02/2006 - WinACE ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

WinAce archiver ARJ archives buffer overflow

Buffer overflow on oversized ARJ header...

CVE-2006-0813: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

CVE-2005-2856

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...

CVE-2005-2856

CVE-2005-2856 describes a stack-based buffer overflow in the WinACE UNACEV2.DLL used by many products (e.g., ALZip, Total Commander, IZArc, BitZipper, UltimateZip, etc.). The flaw occurs when extracting an ACE archive with an overly long filename, allowing user-assisted attackers to execute arbit...

CVE-2005-2856

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...