CVE-2005-0160

Description

Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.

How to fix CVE-2005-0160

To remediate CVE-2005-0160, upgrade the affected package to a fixed version below.

• Debian/unace—upgrade to 1.2b-3 or later

Is CVE-2005-0160 being exploited?

Low — EPSS is 3.2%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.2b-3

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-0160