Back to Database
Status published
High
CVE-2005-2856
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility...
Vulnerability Description
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2856
Credits & Attribution
No credits recorded in the NVD database.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26982
- http://securitytracker.com/id?1016512
- http://secunia.com/secunia_research/2006-24/advisory
- http://www.vupen.com/english/advisories/2006/2824
- http://securityreason.com/securityalert/49
- http://www.securityfocus.com/bid/19884
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26479
- http://www.vupen.com/english/advisories/2006/1797
- http://www.securityfocus.com/archive/1/434279/100/0/threaded
- http://securitytracker.com/id?1014863
- http://securitytracker.com/id?1016011
- http://securitytracker.com/id?1016115
- http://secunia.com/advisories/19939
- http://secunia.com/secunia_research/2006-46/advisory/
- http://securitytracker.com/id?1016065
- http://www.vupen.com/english/advisories/2006/1835
- http://securitytracker.com/id?1016088
- http://www.vupen.com/english/advisories/2006/3495
- http://secunia.com/advisories/19967
- http://secunia.com/secunia_research/2006-27/
- http://securitytracker.com/id?1016177
- http://securitytracker.com/id?1016114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26272
- http://secunia.com/secunia_research/2006-50/advisory/
- http://www.securityfocus.com/archive/1/432579/100/0/threaded
- http://secunia.com/advisories/19931
- http://secunia.com/secunia_research/2006-36/advisory
- http://secunia.com/secunia_research/2006-28/advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26447
- http://secunia.com/advisories/19975
- http://www.vupen.com/english/advisories/2006/1775
- http://secunia.com/advisories/16479
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26385
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26116
- http://www.securityfocus.com/archive/1/436639/100/0/threaded
- http://www.vupen.com/english/advisories/2006/1611
- http://www.vupen.com/english/advisories/2006/1681
- http://www.securityfocus.com/archive/1/433693/100/0/threaded
- http://www.vupen.com/english/advisories/2006/2184
- http://www.vupen.com/english/advisories/2006/1577
- http://secunia.com/secunia_research/2006-33/advisory/
- http://secunia.com/secunia_research/2006-29/advisory/
- http://www.securityfocus.com/archive/1/434234/100/0/threaded
- http://secunia.com/advisories/19938
- http://secunia.com/advisories/19581
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26302
- http://www.vupen.com/english/advisories/2006/1694
- http://secunia.com/advisories/20270
- http://secunia.com/advisories/19890
- http://secunia.com/advisories/19977
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26142
- http://secunia.com/secunia_research/2006-38/advisory
- http://secunia.com/advisories/19596
- http://secunia.com/secunia_research/2005-41/advisory/
- http://securitytracker.com/id?1016066
- http://www.securityfocus.com/archive/1/440303/100/0/threaded
- http://secunia.com/advisories/19458
- http://secunia.com/secunia_research/2006-25/advisory
- http://securitytracker.com/id?1016012
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26736
- http://secunia.com/secunia_research/2006-32/advisory/
- http://secunia.com/advisories/19454
- http://www.securityfocus.com/archive/1/433258/100/0/threaded
- http://secunia.com/secunia_research/2006-30/advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26315
- http://www.securityfocus.com/archive/1/432357/100/0/threaded
- http://www.osvdb.org/25129
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27763
- http://secunia.com/advisories/19834
- http://www.securityfocus.com/archive/1/434011/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28787
- http://www.securityfocus.com/archive/1/433352/100/0/threaded
- http://secunia.com/advisories/20009
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26480
- http://www.vupen.com/english/advisories/2006/2047
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26168
- http://www.securityfocus.com/bid/14759
- http://www.vupen.com/english/advisories/2006/1836
- http://securitytracker.com/id?1016257
- http://secunia.com/advisories/19612
- http://www.vupen.com/english/advisories/2006/1565
- http://www.vupen.com/english/advisories/2006/1725
- http://securitytracker.com/id?1015852
- http://marc.info/?l=bugtraq&m=112621008228458&w=2
More from winace
View All →CVE-2015-2063
Integer overflow in unace 1.2b allows remote attackers to cause...
Medium
4.3
CVE-2007-6563
Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly...
Critical
10
CVE-2007-2535
WinAce allows remote attackers to cause a denial of service...
High
7.8
CVE-2006-0813
Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to...
Medium
5.1
CVE-2005-2694
Buffer overflow in WinAce 2.6.0.5, and possibly earlier versions, allows...
High
7.5
Affected Vendor
winace
View all reports →Affected Software
winace
Vulnerable Versions:
2.6.0.0
Timeline
Official Publish:
September 8th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.