CVE-2005-3284

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in AhnLab V3 AntiVirus V3Pro 2004 before 6.0.0.488, V3Net for Windows Server 6.0 before 6.0.0.488, and MyV3, with compressed file scanning enabled, allow remote attackers to execute arbitrary code via crafted (1) ALZ, (2) UUE, or (3) XXE archives.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://global.ahnlab.com/security/security_advisory002.htmlVendor Advisory
http://secunia.com/advisories/16851Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-48/advisory/Exploit, Vendor Advisory
http://securityreason.com/securityalert/80
http://www.osvdb.org/19955
http://www.securityfocus.com/archive/1/413260
http://www.securityfocus.com/bid/15091
http://global.ahnlab.com/security/security_advisory002.htmlVendor Advisory
http://secunia.com/advisories/16851Patch, Vendor Advisory
http://secunia.com/secunia_research/2005-48/advisory/Exploit, Vendor Advisory
http://securityreason.com/securityalert/80
http://www.osvdb.org/19955
http://www.securityfocus.com/archive/1/413260
http://www.securityfocus.com/bid/15091

Timeline

Published: Oct 23, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-32854.3Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to in CVE-2005-32862.1The FWDRV driver in Kerio Personal Firewall 4.2 and Server Firewall 1.1.1 allows local users to cause a denial of service (crash) by setting CVE-2005-32875.0Incomplete blacklist vulnerability in Mailsite Express allows remote attackers to upload and possibly execute files via attachments with exe CVE-2005-32885.0Mailsite Express allows remote attackers to upload and execute files with executable extensions such as ASP by attaching the file using the CVE-2005-32892.1LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other sy CVE-2005-32907.5SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field CVE-2005-32914.6Stani's Python Editor (SPE) 0.7.5 is installed with world-writable permissions, which allows local users to gain privileges by modifying exe CVE-2005-32924.3Multiple cross-site scripting (XSS) vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javasc CVE-2005-32935.0Xerver 4.17 allows remote attackers to (1) obtain source code of scripts via a request with a trailing "." (dot) or (2) list directory conte CVE-2005-32945.0Typsoft FTP Server 1.11, with "Sub Directory Include" enabled, allows remote attackers to cause a denial of service (crash) by sending multi CVE-2005-32952.1Unspecified vulnerability in HP-UX B.11.23 on Itanium platforms allows local users to cause a denial of service due to a "specific stack siz CVE-2005-329610.0The FTP server in HP-UX 10.20, B.11.00, and B.11.11, allows remote attackers to list arbitrary directories as root by running the LIST comma