CVE-2005-1187

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

Heap-based buffer overflow in WinHex 12.05 SR-14, and possibly other versions, may allow attackers to execute arbitrary code via a long file name argument. NOTE: since this overflow is in the command line of an unprivileged program, it is highly likely that this is not a vulnerability.

Affected products

X-Ways Software Technology Ag Winhex: 12.05_sr-14

References

http://securitytracker.com/id?1013727
http://www.unl0ck.org/files/papers/winhex.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/20139
http://securitytracker.com/id?1013727
http://www.unl0ck.org/files/papers/winhex.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/20139

Get alerted when CVE-2005-1187 or the next vulnerability affects your stack