Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in an ace archive, which triggers a buffer overflow.
References
Link | Resource |
---|---|
http://www.debian.org/security/2015/dsa-3178 | Vendor Advisory |
http://www.openwall.com/lists/oss-security/2015/02/24/1 | Exploit |
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775003 | Exploit |
Configurations
History
No history.
Information
Published : 2015-03-09 14:59
Updated : 2024-02-04 18:35
NVD link : CVE-2015-2063
Mitre link : CVE-2015-2063
CVE.ORG link : CVE-2015-2063
JSON object : View
Products Affected
winace
- unace
CWE
CWE-189
Numeric Errors