CVE-2014-2319

MEDIUM 5.0CVE-2014-2319 · Published 14/03/2014 · updated 17/06/2026

In short

CVE-2014-2319 is a MEDIUM (CVSS 5.0) vulnerability affecting powerarchiver (powerarchiver).
Chance of exploitation in the next 30 days (EPSS): 0.76%, higher than 55.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
powerarchiver powerarchiver	`= 14.00= 14.01= 14.02≤ 14.02.03`	No fix yet

Description

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack.

References

int21.de/cve/CVE-2014-2319-powerarchiver.html
powerarchiver.com/2014/03/12/powerarchiver-2013-14-02-05-released · Vendor Advisory

More vulnerabilities in powerarchiver

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free