5

CVE-2005-2384

Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or (2) absolute pathnames.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Alwil ≫ Avast Antivirus Version 4.6.460 Edition server
Alwil ≫ Avast Antivirus Version 4.6.665 Edition home
Alwil ≫ Avast Antivirus Version 4.6.665 Edition pro
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.49% 0.876
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.avast.com/eng/av4_revision_history.html
http://secunia.com/advisories/15776
Patch
Vendor Advisory
http://secunia.com/secunia_research/2005-20/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1014544