Lucene search

MitreCVE-2005-3051

HistorySep 24, 2005 - 12:03 a.m.

CVE-2005-3051

2005-09-2400:03:00

CWE-119

mitre

web.nvd.nist.gov

cve-2005-3051

arj plugin

7-zip

buffer overflow

remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.146

Percentile

95.9%

JSON

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.

Affected configurations

Nvd

Node

igor_pavlov7-zipMatch3.13

igor_pavlov7-zipMatch4.23

igor_pavlov7-zipMatch4.26_beta

VendorProductVersionCPE
igor_pavlov7-zip3.13cpe:2.3:a:igor_pavlov:7-zip:3.13:*:*:*:*:*:*:*
igor_pavlov7-zip4.23cpe:2.3:a:igor_pavlov:7-zip:4.23:*:*:*:*:*:*:*
igor_pavlov7-zip4.26_betacpe:2.3:a:igor_pavlov:7-zip:4.26_beta:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
igor_pavlov	7-zip	3.13	cpe:2.3:a:igor_pavlov:7-zip:3.13:::::::*
igor_pavlov	7-zip	4.23	cpe:2.3:a:igor_pavlov:7-zip:4.23:::::::*
igor_pavlov	7-zip	4.26_beta	cpe:2.3:a:igor_pavlov:7-zip:4.26_beta:::::::*

References

marc.info/?l=bugtraq&m=112749134603258&w=2

secunia.com/advisories/16664/

secunia.com/advisories/23004

secunia.com/secunia_research/2005-45/advisory/

securitytracker.com/id?1017261

www.securityfocus.com/bid/14925

www.securityfocus.com/bid/21208

www.vuln.sg/turbosearcher330-en.html

www.vupen.com/english/advisories/2006/4603

exchange.xforce.ibmcloud.com/vulnerabilities/30438

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.146

Percentile

95.9%

JSON

Related for CVE-2005-3051