CVE-2005-3317

ZipGenius < 6.0.2.1050 - Remote Code Execution via Long Filename in ZIP, UUE, XXE, MIM, or ACE Archive

Title source: llm

Description

Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll.

References (10)

Core 10

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/20158

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/15161

Various Sources x_refsource_confirm

http://forum.zipgenius.it/index.php?showtopic=684

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17061

Third Party Advisory x_refsource_misc

http://secunia.com/secunia_research/2005-54/advisory

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015090

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/103

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/20159

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/414083

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/20157

Scores

EPSS 0.0551

EPSS Percentile 91.9%

Details

CWE

CWE-119

Status published

Products (3)

zipgenius/zipgenius standard_5.5.1.468

zipgenius/zipgenius suite_5.5.1.468

zipgenius/zipgenius < standard_6.0.2.1041

Published Oct 27, 2005

Tracked Since Feb 18, 2026