9.3

CVE-2005-3051

Stack-based buffer overflow in the ARJ plugin (arj.dll) 3.9.2.0 for 7-Zip 3.13, 4.23, and 4.26 BETA, as used in products including Turbo Searcher, allows remote attackers to execute arbitrary code via a large ARJ block.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Igor Pavlov ≫ 7-zip Version3.13
Igor Pavlov ≫ 7-zip Version4.23
Igor Pavlov ≫ 7-zip Version4.26_beta
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.05% 0.924
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://marc.info/?l=bugtraq&m=112749134603258&w=2
http://secunia.com/advisories/16664/
Vendor Advisory
http://secunia.com/advisories/23004
Vendor Advisory
http://secunia.com/secunia_research/2005-45/advisory/
Vendor Advisory
http://securitytracker.com/id?1017261
http://www.securityfocus.com/bid/14925
http://www.securityfocus.com/bid/21208
http://www.vuln.sg/turbosearcher330-en.html
http://www.vupen.com/english/advisories/2006/4603
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30438