CVE-2005-2720
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HAURI Anti-Virus是由一家韩国公司开发的杀毒软件。 各种HAURI杀毒产品中存在缓冲区溢出漏洞，成功利用这个漏洞的攻击者可以远程执行任意代码。起因是在解压文档时ACE文档解压库vrAZace.dll中存在边界条件错误。如果扫描的恶意ACE文档中包含有文件名大于272个字符的压缩文件的话，就可能导致栈溢出。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2005-2720
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Stack-based buffer overflow in the ACE archive decompression library (vrAZace.dll) in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall, when compressed file scanning is enabled, allows remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
HAURI Anti-Virus 缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HAURI Anti-Virus是由一家韩国公司开发的杀毒软件。 各种HAURI杀毒产品中存在缓冲区溢出漏洞，成功利用这个漏洞的攻击者可以远程执行任意代码。起因是在解压文档时ACE文档解压库vrAZace.dll中存在边界条件错误。如果扫描的恶意ACE文档中包含有文件名大于272个字符的压缩文件的话，就可能导致栈溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2005-2720
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-2720
请登录查看更多情报信息。
Vendor Advisories for CVE-2005-2720 (4)
-
http://secunia.com/secunia_research/2005-33/advisory/ x_refsource_MISC
-
-
-
Mailing List Discussions for CVE-2005-2720 (1)
Same Patch Batch · n/a · 2005-08-29 · 25 CVEs total
| CVE-2005-2726 | Home FTP Server 目录遍历漏洞 | |
| CVE-2005-2737 | PhotoPost PHP Pro 跨站脚本攻击漏洞 | |
| CVE-2005-2736 | YaPig 跨站脚本攻击漏洞 | |
| CVE-2005-2735 | PHP Graphy 跨站脚本攻击漏洞 | |
| CVE-2005-2734 | Gallery 跨站脚本漏洞 | |
| CVE-2005-2733 | Simple PHP Blog多个远程安全漏洞 | |
| CVE-2005-2732 | AWStats config参数 敏感信息泄露漏洞 | |
| CVE-2005-2731 | Astaro Security Linux 目录遍历漏洞 | |
| CVE-2005-2730 | Astaro Security Linux 敏感信息泄露漏洞 | |
| CVE-2005-2729 | Astaro Security Linux HTTP CONNECT 未授权访问漏洞 | |
| CVE-2005-2728 | Apache 安全漏洞 | |
| CVE-2005-2727 | Home FTP Server 输入验证漏洞 | |
| CVE-2005-1855 | Backup Manager 敏感信息泄露漏洞 | |
| CVE-2005-2725 | QNX RTOS InputTrap本地任意文件泄露漏洞 | |
| CVE-2005-2724 | SqWebMail 跨站脚本攻击漏洞 | |
| CVE-2005-2723 | PAFileDB 'auth.php' SQL注入漏洞 | |
| CVE-2005-2722 | Foojan PHP Weblog 敏感信息泄露漏洞 | |
| CVE-2005-2721 | Foojan PHPWeblog 多个脚本注入漏洞 | |
| CVE-2005-2719 | Ventrilo 服务器崩溃漏洞 | |
| CVE-2005-2718 | MPlayer 'ad_pcm.c' 缓冲区溢出漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2005-2720
No comments yet