CVE-2005-2957

Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive.

• http://marc.info/?l=bugtraq&m=112671128224841&w=2
• http://secunia.com/advisories/16691/Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-43/advisory/Patch, Vendor Advisory
• http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/14824Patch
• http://marc.info/?l=bugtraq&m=112671128224841&w=2
• http://secunia.com/advisories/16691/Patch, Vendor Advisory
• http://secunia.com/secunia_research/2005-43/advisory/Patch, Vendor Advisory
• http://www.avira.com/en/news/avira_desktop_for_windows_patched_against_vulnerability.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/14824Patch

Published

Sep 16, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2951Directory traversal vulnerability in security.inc.php in AzD…
• CVE-2005-2952Directory traversal vulnerability in s.pl in Subscribe Me Pr…
• CVE-2005-2953Cross-site scripting (XSS) vulnerability in merchant.mvc in …
• CVE-2005-2954SQL injection vulnerability in password_reminder.php in ATut…
• CVE-2005-2955config.inc.php in ATutor 1.5.1, and possibly earlier version…
• CVE-2005-2956ATutor 1.5.1, and possibly earlier versions, stores temporar…
• CVE-2005-2958Multiple format string vulnerabilities in the GNOME Data Acc…
• CVE-2005-2959Incomplete blacklist vulnerability in sudo 1.6.8 and earlier…
• CVE-2005-2960cfengine 1.6.5 and 2.1.16 allows local users to overwrite ar…
• CVE-2005-2961Buffer overflow in the get_string_ahref function for ProZill…
• CVE-2005-2962The post-installation script for ntlmaps before 0.9.9 sets w…
• CVE-2005-2963The mod_auth_shadow module 1.0 through 1.5 and 2.0 for Apach…