Vulnerability Details CVE-2005-2903
Heap-based buffer overflow in NOD32 2.5 with nod32.002 1.033 build 1127, with active scanning enabled, allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.057
EPSS Ranking 90.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=112621063025054&w=2
- http://secunia.com/advisories/16604/
- http://secunia.com/secunia_research/2005-40/advisory/
- http://www.securityfocus.com/bid/14773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22203
- http://marc.info/?l=bugtraq&m=112621063025054&w=2
- http://secunia.com/advisories/16604/
- http://secunia.com/secunia_research/2005-40/advisory/
- http://www.securityfocus.com/bid/14773
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22203
Products affected by CVE-2005-2903
-
cpe:2.3:a:eset_software:nod32_antivirus:2.5