CVE-2005-2720
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.04%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 4.04% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- hauri/livecall · hauri/virobot advanced server · hauri/virobot expert · hauri/virobot linux server
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=112490854126619&w=2
- http://secunia.com/advisories/16488/Patch, Vendor Advisory
- http://secunia.com/secunia_research/2005-33/advisory/Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14647Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22005
- http://marc.info/?l=bugtraq&m=112490854126619&w=2
- http://secunia.com/advisories/16488/Patch, Vendor Advisory
- http://secunia.com/secunia_research/2005-33/advisory/Patch, Vendor Advisory
- http://www.securityfocus.com/bid/14647Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22005
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.