Description
Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69, allows user-assisted remote attackers to execute arbitrary code via a long filename in a compressed UUE archive.
References
- ADV-2007-4312 vdb-entry
- JVNDB-2007-000822 third-party-advisory
- 27017 vdb-entry
- winace-uue-bo(39268) vdb-entry
- http://www.fourteenforty.jp/research/advisory.cgi?FFRRA-20071225
- JVN#44736880 third-party-advisory
- 40267 vdb-entry
- 28215 third-party-advisory