CVE-2005-2957

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=112671128224841&w=2
http://secunia.com/advisories/16691/Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-43/advisory/Patch, Vendor Advisory
http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/14824Patch
http://marc.info/?l=bugtraq&m=112671128224841&w=2
http://secunia.com/advisories/16691/Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-43/advisory/Patch, Vendor Advisory
http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/14824Patch

Timeline

Published: Sep 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-29587.5Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute ar CVE-2005-29594.6Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environ CVE-2005-29602.1cfengine 1.6.5 and 2.1.16 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in, a differe CVE-2005-29617.5Buffer overflow in the get_string_ahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remot CVE-2005-29622.1The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users t CVE-2005-29637.5The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apache with AuthShadow enabled uses shadow authentication for all locations that use CVE-2005-29647.5Stack-based buffer overflow in AbiWord before 2.2.10 allows attackers to execute arbitrary code via the RTF import mechanism.CVE-2005-29665.1The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a CVE-2005-29677.5Format string vulnerability in input_cdda.c in xine-lib 1-beta through 1-beta 3, 1-rc, 1.0 through 1.0.2, and 1.1.1 allows remote servers to CVE-2005-29687.5Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the br CVE-2005-29695.0The SSL/TLS server implementation in OpenSSL 0.9.7 before 0.9.7h and 0.9.8 before 0.9.8a, when using the SSL_OP_MSIE_SSLV2_RSA_PADDING optio CVE-2005-29705.0Memory leak in the worker MPM (worker.c) for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service (memor