CVE-2004-0947: Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames

Unscored severity · published Feb 9, 2005

CVE-2004-0947

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames

–

CVSS

7.4%

EPSS

On KEV

Description

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.

Exploitation

Is it being used?

Exploit prediction (EPSS)7.4% · higher than 94% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

All versions, or not specified · source: NVD

9.0; 9.1; 9.2 · source: NVD

2.62; 2.63_a; 2.64; 2.65 · source: NVD

Affected product

Unarj

Arj Software Inc.

References