What’s Vulnerable › Vulnerabilities

CVE-2005-3862

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 20.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-11-29 · updated 2026-06-16

Description

Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives.

Affected products

• Unalz: 0.2, 0.3, 0.4, 0.5, 0.22, 0.23 (+3)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842
• http://secunia.com/advisories/17774
• http://secunia.com/advisories/18665
• http://www.debian.org/security/2006/dsa-959
• http://www.kipple.pe.kr/win/unalz/
• http://www.osvdb.org/21160
• http://www.securityfocus.com/bid/15577
• http://www.vupen.com/english/advisories/2005/2604
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23267
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=340842
• http://secunia.com/advisories/17774
• http://secunia.com/advisories/18665

Get alerted when CVE-2005-3862 or the next vulnerability affects your stack