HIGH
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive
Published Sep 8, 2005
7.5
HIGHCVSS 2.0
EPSS 15.68%
Description
Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.
Affected products
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
7.5 HIGH NVD
AV:N/AC:L/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
15.68% 0.15681
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.15681
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (10 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 15.68% (0.15681) | 96.75th | v5 (v2026.06.15) |
| Jun 15, 2026 | 15.68% (0.15681) | 96.42th | v5 (v2026.06.15) |
| Mar 30, 2025 | 21.56% (0.21562) | 95.23th | v4 (v2025.03.14) |
| Mar 29, 2025 | 16.60% (0.16596) | 91.54th | v4 (v2025.03.14) |
| Mar 23, 2025 | 21.56% (0.21562) | 95.00th | v4 (v2025.03.14) |
| Mar 17, 2025 | 14.59% (0.14590) | 93.96th | v4 (v2025.03.14) |
| Dec 12, 2024 | 2.03% (0.02026) | 89.39th | v3 (v2023.03.01) |
| Mar 7, 2023 | 2.19% (0.02186) | 87.61th | v3 (v2023.03.01) |
| Mar 6, 2023 | 27.99% (0.27992) | 97.24th | v2 (v2022.01.01) |
| Feb 4, 2022 | 27.99% (0.27992) | 95.99th | v2 (v2022.01.01) |
Weaknesses (1)
References (84)
- http://marc.info/?l=bugtraq&m=112621008228458&w=2 mailing-listx_refsource_BUGTRAQ
- http://secunia.com/advisories/16479 third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
- http://secunia.com/advisories/19454 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19458 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19581 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19596 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19612 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19834 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19890 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19931 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19938 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19939 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/19967 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19975 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/19977 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/20009 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/20270 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/secunia_research/2005-41/advisory/ x_refsource_MISC
- http://secunia.com/secunia_research/2006-24/advisory x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-25/advisory x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-27/ x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-28/advisory x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-29/advisory/ x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-30/advisory x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-32/advisory/ x_refsource_MISC
- http://secunia.com/secunia_research/2006-33/advisory/ x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-36/advisory x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-38/advisory x_refsource_MISCVendor Advisory
- http://secunia.com/secunia_research/2006-46/advisory/ x_refsource_MISC
- http://secunia.com/secunia_research/2006-50/advisory/ x_refsource_MISC
- http://securityreason.com/securityalert/49 third-party-advisoryx_refsource_SREASON
- http://securitytracker.com/id?1014863 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1015852 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016011 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016012 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016065 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016066 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016088 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016114 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016115 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016177 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016257 vdb-entryx_refsource_SECTRACK
- http://securitytracker.com/id?1016512 vdb-entryx_refsource_SECTRACK
- http://www.osvdb.org/25129 vdb-entryx_refsource_OSVDB
- http://www.securityfocus.com/archive/1/432357/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/432579/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/433258/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/433352/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/433693/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/434011/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/434234/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/434279/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/436639/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/archive/1/440303/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/14759 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/19884 vdb-entryx_refsource_BID
- http://www.vupen.com/english/advisories/2006/1565 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1577 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1611 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1681 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1694 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1725 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1775 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1797 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1835 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/1836 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/2047 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/2184 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/2824 vdb-entryx_refsource_VUPEN
- http://www.vupen.com/english/advisories/2006/3495 vdb-entryx_refsource_VUPEN
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26116 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26142 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26168 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26272 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26302 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26315 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26385 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26447 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26479 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26480 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26736 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26982 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27763 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28787 vdb-entryx_refsource_XF
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 8, 2005
Updated Aug 7, 2024
Reserved Sep 8, 2005
Link CVE-2005-2856
CISA Vulnrichment
Updated n/a