VDB
CVE-2005-4438
CVE-2005-4438
PUBLISHED
CVSS 7.5 HIGH
Heap-based buffer overflow in Dec2Rar.dll 3.2.14.3, as distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers that contain incorrect values in the length field.
EPSS 10.67% · 93.5th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
10.67%
93.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| dec2rar.dll | dec2rar.dll | 3.2.14.3 |
Timeline
- Dec 21, 2005 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- 15971 vdb
- 276 third-party-advisory
- ADV-2005-3003 vdb
- http://www.rem0te.com/public/images/symc2.pdf url
- 1015384 vdb
- 20051220 Symantec Antivirus Library Remote Heap Overflows mailing-list
- VU#305272 third-party-advisory
- 18131 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2005-4438 advisory