|
PowerArchiver ACE/ARJ Archive Handling Buffer Overflow
|
|
Secunia Advisory:
|
SA16713
|
|
|
Release Date:
|
2005-09-23
|
|
Last Update:
|
2005-10-04
|
|
Popularity:
|
7,552 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | PowerArchiver 2002 8.x
PowerArchiver 2003 8.x
PowerArchiver 2004 9.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2005-3061
|
|
Description:
Secunia Research has discovered a vulnerability in PowerArchiver, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to a boundary error when reading the filename of a compressed file from an ACE/ARJ archive. This can be exploited to cause a stack-based buffer overflow when a malicious archive containing a file with an overly long filename is opened.
Successful exploitation allows arbitrary code execution.
The vulnerability has been confirmed in the following versions with ACE, or ARJ archives, or both:
* PowerArchiver 2006 version 9.5 Beta 4/Beta 5
* PowerArchiver 2004 version 9.25
* PowerArchiver 2003 version 8.60
* PowerArchiver 2002 version 8.10
Prior versions may also be affected.
Solution:
Update to a fixed version.
PowerArchiver 2004:
Update to version 9.26.
The vulnerability has also been fixed in PowerArchiver 2006 Beta 6.
Provided and/or discovered by:
Tan Chew Keong, Secunia Research.
Changelog:
2005-10-04: Added CVE reference.
Original Advisory:
Secunia Research:
http://secunia.com/secunia_research/2005-50/advisory/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
