JVNDB-2007-000745

PowerArchiver buffer overflow vulnerability

PowerArchiver from ConeXware, Inc. contains a buffer overflow vulnerability.

PowerArchiver, file compression/decompression software from ConeXware, Inc. supporting multiple compression file formats, contains a buffer overflow vulnerability.
If a user opens a specially crafted file, an attacker could execute arbitrary code with the privileges of the user.

Base Metrics: 6.8 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: Partial
• Availability Impact: Partial

ConeXware, Inc.

• PowerArchiver prior to 10.20.21

An attacker could execute arbitrary code with the privileges of the user who opened the file.

[Update the Software]

Apply the latest updates provided by the vendor.
For more information, refer to the vendor's website.

ConeXware, Inc.

• PowerArchiver Download : http://www.powerarchiver.com/download/
• PowerArchiver News : Security Fix for BlackHole Archives

1. JVN : JVN#61323184
2. National Vulnerability Database (NVD) : CVE-2007-5279
3. Common Vulnerabilities and Exposures (CVE) : CVE-2007-5279
4. Secunia Advisory : SA27000
5. FrSIRT Advisories : FrSIRT/ADV-2007-3378
6. Common Weakness Enumeration (CWE) : Buffer Errors (CWE-119) [NVD Evaluation]

[2008/05/21]
  Web page published