CVE-2007-5155

IceGUI.DLL in ICEOWS 4.20b is affected. The vulnerability occurs when a function is invoked with incorrect arguments, allowing user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow.