CVE-2005-2957

ALTO 7.5CVE-2005-2957 · Published 16/09/2005 · updated 16/06/2026

In breve

CVE-2005-2957 è una vulnerabilità ALTO (CVSS 7.5) che riguarda desktop (avira).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.0%, superiore al 90.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
desktop avira	`= 1.00.00.68`	No fix yet

Description

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive.

References

marc.info
secunia.com/advisories/16691 · Patch
secunia.com/secunia_research/2005-43/advisory · Patch
avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html · Patch
securityfocus.com/bid/14824 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free