[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-3178-1 unace -- unace

ID: oval:org.secpod.oval:def:601977Date: (C)2015-03-05   (M)2021-06-02
Class: PATCHFamily: unix




Jakub Wilk discovered that unace, an utility to extract, test and view .ace archives, contained an integer overflow leading to a buffer overflow. If a user or automated system were tricked into processing a specially crafted ace archive, an attacker could cause a denial of service or, possibly, execute arbitrary code.

Platform:
Debian 7.0
Product:
unace
Reference:
DSA-3178-1
CVE-2015-2063
CVE    1
CVE-2015-2063
CPE    2
cpe:/o:debian:debian_linux:7.x
cpe:/a:e-merge:unace

© SecPod Technologies