CVE-2005-2856

Exp

Stack-based buffer overflow in the WinACE UNACEV2.DLL third-party compression utility before 2.6.0.0, as used in multiple products including (1) ALZip 5.51 through 6.11, (2) Servant Salamander 2.0 and 2.5 Beta 1, (3) WinHKI 1.66 and 1.67, (4) ExtractNow 3.x, (5) Total Commander 6.53, (6) Anti-Trojan 5.5.421, (7) PowerArchiver before 9.61, (8) UltimateZip 2.7,1, 3.0.3, and 3.1b, (9) Where Is It (WhereIsIt) 3.73.501, (10) FilZip 3.04, (11) IZArc 3.5 beta3, (12) Eazel 1.0, (13) Rising Antivirus 18.27.21 and earlier, (14) AutoMate 6.1.0.0, (15) BitZipper 4.1 SR-1, (16) ZipTV, and other products, allows user-assisted attackers to execute arbitrary code via a long filename in an ACE archive.

Published: 2005-09-08 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2005-2856 is rated High Exploit Risk (83.3/100): CVSS High severity, with high exploitation likelihood (EPSS 21.56%, 95th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +4.97% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2005-2856

EDB-ID Source Kind Published Link
1633 exploit_db edb 2006-04-02 Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2005-2856

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-03-30 16.60% 21.56% +4.97%
2 2025-03-29 21.56% 16.60% -4.97%
3 2025-03-23 21.56%

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2005-2856

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 2.0 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 6.4 [email protected]

Weakness enumeration for CVE-2005-2856

Affected software / configurations for CVE-2005-2856

Vendor Product Version Raw CPE
winace winace 2.6.0.0 cpe:2.3:a:winace:winace:2.6.0.0:*:*:*:*:*:*:*

References for CVE-2005-2856

URL Tags
http://marc.info/?l=bugtraq&m=112621008228458&w=2
http://secunia.com/advisories/16479 Patch Vendor Advisory
http://secunia.com/advisories/19454 Vendor Advisory
http://secunia.com/advisories/19458 Vendor Advisory
http://secunia.com/advisories/19581 Vendor Advisory
http://secunia.com/advisories/19596
http://secunia.com/advisories/19612
http://secunia.com/advisories/19834 Vendor Advisory
http://secunia.com/advisories/19890 Vendor Advisory
http://secunia.com/advisories/19931
http://secunia.com/advisories/19938 Vendor Advisory
http://secunia.com/advisories/19939
http://secunia.com/advisories/19967 Vendor Advisory
http://secunia.com/advisories/19975 Vendor Advisory
http://secunia.com/advisories/19977 Vendor Advisory
http://secunia.com/advisories/20009 Vendor Advisory
http://secunia.com/advisories/20270
http://secunia.com/secunia_research/2005-41/advisory/
http://secunia.com/secunia_research/2006-24/advisory Vendor Advisory
http://secunia.com/secunia_research/2006-25/advisory Vendor Advisory
http://secunia.com/secunia_research/2006-27/ Vendor Advisory
http://secunia.com/secunia_research/2006-28/advisory Vendor Advisory
http://secunia.com/secunia_research/2006-29/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2006-30/advisory Vendor Advisory
http://secunia.com/secunia_research/2006-32/advisory/
http://secunia.com/secunia_research/2006-33/advisory/ Vendor Advisory
http://secunia.com/secunia_research/2006-36/advisory Vendor Advisory
http://secunia.com/secunia_research/2006-38/advisory Vendor Advisory
http://secunia.com/secunia_research/2006-46/advisory/
http://secunia.com/secunia_research/2006-50/advisory/
http://securityreason.com/securityalert/49
http://securitytracker.com/id?1014863
http://securitytracker.com/id?1015852
http://securitytracker.com/id?1016011
http://securitytracker.com/id?1016012
http://securitytracker.com/id?1016065
http://securitytracker.com/id?1016066
http://securitytracker.com/id?1016088
http://securitytracker.com/id?1016114
http://securitytracker.com/id?1016115
http://securitytracker.com/id?1016177
http://securitytracker.com/id?1016257
http://securitytracker.com/id?1016512
http://www.osvdb.org/25129
http://www.securityfocus.com/archive/1/432357/100/0/threaded
http://www.securityfocus.com/archive/1/432579/100/0/threaded
http://www.securityfocus.com/archive/1/433258/100/0/threaded
http://www.securityfocus.com/archive/1/433352/100/0/threaded
http://www.securityfocus.com/archive/1/433693/100/0/threaded
http://www.securityfocus.com/archive/1/434011/100/0/threaded
http://www.securityfocus.com/archive/1/434234/100/0/threaded
http://www.securityfocus.com/archive/1/434279/100/0/threaded
http://www.securityfocus.com/archive/1/436639/100/0/threaded
http://www.securityfocus.com/archive/1/440303/100/0/threaded
http://www.securityfocus.com/bid/14759
http://www.securityfocus.com/bid/19884
http://www.vupen.com/english/advisories/2006/1565
http://www.vupen.com/english/advisories/2006/1577
http://www.vupen.com/english/advisories/2006/1611
http://www.vupen.com/english/advisories/2006/1681
http://www.vupen.com/english/advisories/2006/1694
http://www.vupen.com/english/advisories/2006/1725
http://www.vupen.com/english/advisories/2006/1775
http://www.vupen.com/english/advisories/2006/1797
http://www.vupen.com/english/advisories/2006/1835
http://www.vupen.com/english/advisories/2006/1836
http://www.vupen.com/english/advisories/2006/2047
http://www.vupen.com/english/advisories/2006/2184
http://www.vupen.com/english/advisories/2006/2824
http://www.vupen.com/english/advisories/2006/3495
https://exchange.xforce.ibmcloud.com/vulnerabilities/26116
https://exchange.xforce.ibmcloud.com/vulnerabilities/26142
https://exchange.xforce.ibmcloud.com/vulnerabilities/26168
https://exchange.xforce.ibmcloud.com/vulnerabilities/26272
https://exchange.xforce.ibmcloud.com/vulnerabilities/26302
https://exchange.xforce.ibmcloud.com/vulnerabilities/26315
https://exchange.xforce.ibmcloud.com/vulnerabilities/26385
https://exchange.xforce.ibmcloud.com/vulnerabilities/26447
https://exchange.xforce.ibmcloud.com/vulnerabilities/26479
https://exchange.xforce.ibmcloud.com/vulnerabilities/26480
https://exchange.xforce.ibmcloud.com/vulnerabilities/26736
https://exchange.xforce.ibmcloud.com/vulnerabilities/26982
https://exchange.xforce.ibmcloud.com/vulnerabilities/27763
https://exchange.xforce.ibmcloud.com/vulnerabilities/28787
cvelogic Threat Intelligence