‹ Volver al listado

CVE-2005-3317

Estado: ModificadaAlta (7.5)—
Gravedad7.5Alta · CVSS 2.0
Probabilidad de explotación5.51 %mayor que el 93 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado

Varios desbordamientos de búfer basados en la pila en ZipGenius 5.5.1.468 y 6.0.2.1041, y otras versiones anteriores a 6.0.2.1050, permiten a atacantes remotos ejecutar código arbitrario mediante (1) un archivo ZIP que contiene un fichero con un nombre de archivo largo, que no se gestiona correctamente en (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll y (d) contmenu.dll; (2) un nombre original largo en un archivo (a) UUE, (b) XXE o (c) MIM, que no se gestiona correctamente en zipgenius.exe; o (3) un archivo ACE con un fichero con un nombre de archivo largo, que no se gestiona correctamente en unacev2.dll.

Traducción automática del texto original de NVD (en inglés).

CVSS

Puntuación base
7.5
Versión
2.0
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días
5.51 %
Percentil entre todas las CVEs puntuadas
93
Fecha de la puntuación
22/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Zipgenius — Zipgenius

CWE

Referencias

Mostrar las 20 referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2005-3317",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2005-10-27T10:02:00.000",
  "references": [
    {
      "url": "http://forum.zipgenius.it/index.php?showtopic=684",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/17061",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/secunia_research/2005-54/advisory",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/103",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1015090",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/20157",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/20158",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/20159",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/414083",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/15161",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://forum.zipgenius.it/index.php?showtopic=684",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/17061",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2005-54/advisory",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securityreason.com/securityalert/103",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1015090",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/20157",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/20158",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/20159",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/414083",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/15161",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple stack-based buffer overflows in ZipGenius 5.5.1.468 and 6.0.2.1041, and other versions before 6.0.2.1050, allow remote attackers to execute arbitrary code via (1) a ZIP archive that contains a file with a long filename, which is not properly handled by (a) zipgenius.exe, (b) zg.exe, (c) zgtips.dll, and (d) contmenu.dll; (2) a long original name in a (a) UUE, (b) XXE, or (c) MIM file, which is not properly handled by zipgenius.exe; or (3) an ACE archive with a file with a long filename, which is not properly handled by unacev2.dll."
    }
  ],
  "lastModified": "2026-06-16T22:16:42.837",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D49E97D-3A6D-447B-B192-6D167EF84ADF",
              "versionEndIncluding": "standard_6.0.2.1041"
            },
            {
              "criteria": "cpe:2.3:a:zipgenius:zipgenius:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E7C1BF1-F65D-47FA-AFA8-18AF0557079C",
              "versionEndIncluding": "suite_6.0.2.1041"
            },
            {
              "criteria": "cpe:2.3:a:zipgenius:zipgenius:standard_5.5.1.468:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A6F8BA4-65CA-43E2-A118-8B56F6F275FF"
            },
            {
              "criteria": "cpe:2.3:a:zipgenius:zipgenius:suite_5.5.1.468:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFE919D2-21DB-4829-80A0-A2C50D6F6628"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}