CVE-2005-2856

The record

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.

Affected packages

Related vulnerabilities

• CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
• CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
• CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
• CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119
• CVE-2026-12330 Incorrect boundary conditions in the Internationalization component. CWE-119
• CVE-2026-12326 Memory safety bugs present in Firefox 151 and Thunderbird 151. CWE-119