E-Merge: Security Vulnerabilities
Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
CVSS Score
4.0
EPSS Score
0.037
Published
2006-03-03
Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain "Ready for next volume" messages.
CVSS Score
5.1
EPSS Score
0.022
Published
2005-02-22
Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.
CVSS Score
2.1
EPSS Score
0.005
Published
2005-02-22