CVE-2007-2535

CVE-2007-2535 affects WinAce. A ZOO archive containing a direntry that points to a previous file can cause a remote denial-of-service via an infinite loop. The available documents confirm the vulnerability is a DoS condition with no public details on exploit vectors, affected versions, or fixes. ...

CVE-2007-2535

WinAce allows remote attackers to cause a denial of service infinite loop via a ZOO archive with a direntry structure that points to a previous file...

CVE-2006-0981

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

Directory traversal

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0981

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2006-0981

CVE-2006-0981 describes a directory traversal in e-merge WinAce 2.6 and earlier, where improper handling of archived file paths in TAR (and ZIP) archives allows remote attackers to create or overwrite arbitrary files. CPAI advisory adds that exploitation may lead to code execution depending on lo...

CVE-2006-0813

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

Heap overflow

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

CVE-2006-0813

CVE-2006-0813 describes a heap-based buffer overflow in WinACE 2.60 triggered by a large ARJ header block. The underlying issue is a boundary/heap buffer handling error when reading an oversized ARJ header, allowing a user-assisted attacker to execute arbitrary code when a malicious ARJ archive i...

CVE-2006-0813

Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive...

Secunia Research: WinACE ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/02/2006 - WinACE ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

WinAce archiver ARJ archives buffer overflow

Buffer overflow on oversized ARJ header...

CVE-2005-2856

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...

CVE-2005-2856

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including 1 ALZip 5.51 through 6.11, 2 Servant Salamander 2.0 and 2.5 Beta 1, 3 WinHKI 1.66 and 1.67, 4 ExtractNow 3.x, 5 Total Commander 6.53, 6 Anti-Trojan 5.5.421,...

CVE-2005-2856

CVE-2005-2856 describes a stack-based buffer overflow in the WinACE UNACEV2.DLL used by many products (e.g., ALZip, Total Commander, IZArc, BitZipper, UltimateZip, etc.). The flaw occurs when extracting an ACE archive with an overly long filename, allowing user-assisted attackers to execute arbit...

KLA10311 ACE vulnerability in multiple software

A buffer overflow was found in the WinACE compression utility, which is used in multiple products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ACE filename. Original advisories - Related product...

CVE-2005-2694

Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary .tmp file that contains an entry with a long file name...

CVE-2005-2694

CVE-2005-2694 describes a buffer overflow in WinAce 2.6.0.5 (and possibly earlier versions) that allows remote attackers to execute arbitrary code by processing a temporary .tmp file containing an entry with a long file name. Public records identify this as a remote code execution vulnerability w...

CVE-2005-2694

Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows remote attackers to execute arbitrary code via a temporary .tmp file that contains an entry with a long file name...

WinAce2605.txt

=========================================================================== Application: WinAce http://www.winace.com/ Versions: 2.6.0.5 Platforms: Windows Bug: buffer-overflow Exploitation: local Date: Jul 22 2004 Author: ATmaCA e-mail: [email protected] web: http://www.atmacasoft.com Credit:...