Lucene search

K
cveFlexeraCVE-2006-2482
HistorySep 08, 2006 - 9:04 p.m.

CVE-2006-2482

2006-09-0821:04:00
CWE-119
flexera
web.nvd.nist.gov
23
cve-2006-2482
tziptv
buffer overflow
arbitrary code execution
arj archive
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.02

Percentile

89.2%

Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE: the ACE archive vector is covered by CVE-2005-2856.

Affected configurations

Nvd
Node
microchip_data_systemsziptv_for_c\+\+_builderMatch2006.1.16
OR
microchip_data_systemsziptv_for_delphi_7Match2006.1.26
OR
pentawarepentasuite-proMatch8.5.1.221
OR
pentawarepentazipMatch8.5.1.190
VendorProductVersionCPE
microchip_data_systemsziptv_for_c\+\+_builder2006.1.16cpe:2.3:a:microchip_data_systems:ziptv_for_c\+\+_builder:2006.1.16:*:*:*:*:*:*:*
microchip_data_systemsziptv_for_delphi_72006.1.26cpe:2.3:a:microchip_data_systems:ziptv_for_delphi_7:2006.1.26:*:*:*:*:*:*:*
pentawarepentasuite-pro8.5.1.221cpe:2.3:a:pentaware:pentasuite-pro:8.5.1.221:*:*:*:*:*:*:*
pentawarepentazip8.5.1.190cpe:2.3:a:pentaware:pentazip:8.5.1.190:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.02

Percentile

89.2%