CVE-2005-2957 Information

Description

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3 when archive scanning is enabled allows remote attackers to execute arbitrary code via a long filename in an ACE archive.

Reference

http://marc.info/?l=bugtraq&m=112671128224841&w=2 http://secunia.com/advisories/16691/ http://secunia.com/secunia_research/2005-43/advisory/ http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.html http://www.securityfocus.com/bid/14824