CVE-2005-0644

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdfVendor Advisory
http://secunia.com/advisories/14628
http://securitytracker.com/id?1013463
http://www.kb.cert.org/vuls/id/361180Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/10243Exploit
http://www.securityfocus.com/bid/12832
http://xforce.iss.net/xforce/alerts/id/190Vendor Advisory
http://images.mcafee.com/misc/McAfee_Security_Bulletin_05-march-17.pdfVendor Advisory
http://secunia.com/advisories/14628
http://securitytracker.com/id?1013463
http://www.kb.cert.org/vuls/id/361180Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/10243Exploit
http://www.securityfocus.com/bid/12832
http://xforce.iss.net/xforce/alerts/id/190Vendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-06454.3Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and CVE-2005-06467.5SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.CVE-2005-06475.0admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] CVE-2005-06484.3Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) CVE-2005-06494.3Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."CVE-2005-06504.3Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (CVE-2005-06517.5Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) de CVE-2005-06522.1Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.CVE-2005-06534.6phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more CVE-2005-06545.0gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash)CVE-2005-06555.0auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) h CVE-2005-06564.3Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1)