Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.1
CVE-2005-0160: unace 1.2b may run attacker code from crafted archives
CVE-2005-0160 · published 21 years ago
Summary
The unace 1.2b program that extracts ACE compressed files can be tricked into running whatever code an attacker wants. This can happen when a specially crafted archive, an overly long command line, or a specific status message is processed. Update to a newer version or stop using unace 1.2b until it is replaced.
What to do
- Update debian unace to version 1.2b-3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | unace |
< 1.2b-3 Fix: upgrade to 1.2b-3
|
| Debian:13 | debian | unace |
< 1.2b-3 Fix: upgrade to 1.2b-3
|
| Debian:14 | debian | unace |
< 1.2b-3 Fix: upgrade to 1.2b-3
|
| – | e-merge | unace |
1.2b cpe:2.3:a:e-merge:unace:1.2b:*:*:*:*:*:*:* |
Original advisory text
Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messa...
Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.
References
- https://security-tracker.debian.org/tracker/CVE-2005-0160 Vendor Advisory
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-February/031908.html Vendor Advisory
- http://secunia.com/advisories/14359 Vendor Advisory
- http://www.kb.cert.org/vuls/id/215006 US Government Resource
- http://www.novell.com/linux/security/advisories/2005_16_sr.html
- http://www.securityfocus.com/bid/12630
Severity
5.1
Medium
Timeline
Published22 Feb 2005
Updated31 Oct 2026
First seen8 Sep 2026
Track software like this
Free during beta