CVE-2005-3317

{"id": "CVE-2005-3317", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-10-27T10:02:00.000", "references": [{"url": "http://forum.zipgenius.it/index.php?showtopic=684", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/17061", "source": "cve@mitre.org"}, {"url": "http://secunia.com/secunia_research/2005-54/advisory", "source": "cve@mitre.org"}, {"url": "http://securityreason.com/securityalert/103", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1015090", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/20157", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/20158", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/20159", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/414083", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15161", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll."}], "lastModified": "2009-03-25T04:00:00.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D49E97D-3A6D-447B-B192-6D167EF84ADF", "versionEndIncluding": "standard_6.0.2.1041"}, {"criteria": "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E7C1BF1-F65D-47FA-AFA8-18AF0557079C", "versionEndIncluding": "suite_6.0.2.1041"}, {"criteria": "cpe:2.3:a:zipgenius:zipgenius:standard_5.5.1.468:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A6F8BA4-65CA-43E2-A118-8B56F6F275FF"}, {"criteria": "cpe:2.3:a:zipgenius:zipgenius:suite_5.5.1.468:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFE919D2-21DB-4829-80A0-A2C50D6F6628"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}