CVE

Id
14523  
CVE No.
CVE-2005-3317  
Status
Candidate  
Description
Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll.  
Phase
Assigned (20051027)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
109778 14523 CVE-2005-3317 BUGTRAQ:20051021 Secunia Research: ZipGenius Multiple Archive Handling BufferOverflow  View
109779 14523 CVE-2005-3317 URL:http://www.securityfocus.com/archive/1/414083  View
109780 14523 CVE-2005-3317 MISC:http://secunia.com/secunia_research/2005-54/advisory  View
109781 14523 CVE-2005-3317 CONFIRM:http://forum.zipgenius.it/index.php?showtopic=684  View
109782 14523 CVE-2005-3317 BID:15161  View
109783 14523 CVE-2005-3317 URL:http://www.securityfocus.com/bid/15161  View
109784 14523 CVE-2005-3317 OSVDB:20157  View
109785 14523 CVE-2005-3317 URL:http://www.osvdb.org/20157  View
109786 14523 CVE-2005-3317 OSVDB:20158  View
109787 14523 CVE-2005-3317 URL:http://www.osvdb.org/20158  View
109788 14523 CVE-2005-3317 OSVDB:20159  View
109789 14523 CVE-2005-3317 URL:http://www.osvdb.org/20159  View
109790 14523 CVE-2005-3317 SECTRACK:1015090  View
109791 14523 CVE-2005-3317 URL:http://securitytracker.com/id?1015090  View
109792 14523 CVE-2005-3317 SECUNIA:17061  View
109793 14523 CVE-2005-3317 URL:http://secunia.com/advisories/17061  View
109794 14523 CVE-2005-3317 SREASON:103  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62449 JVNDB-2005-000651 PHP の Apache2handler SAPI におけるサービス運用妨害 (DoS) の脆弱性 PHP に含まれる Apache モジュールの apache2handler SAPI には、.htaccess あるいは httpd.conf で指定された session.save_path の処理に不備が存在するため、Null ポインタデリファレンスにより Apache の子プロセスでセグメンテーションフォルトが発生する脆弱性が存在します。 CVE-2005-3319 14523 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000651.html  View