CVE-2004-0947: Buffer Overflow
Published Nov 24, 2004
·Updated
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.
Affected Software
8 affected components
Arj Software Inc. Unarj=2.65
Arj Software Inc. Unarj=2.63_a
Arj Software Inc. Unarj=2.62
Arj Software Inc. Unarj=2.64
SUSE SuSE Linux=9.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
Gentoo Linux
Remediation
Patch Available
Patch Available
Event History
Nov 24, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0947?
The severity of CVE-2004-0947 is classified as high due to the potential for remote code execution.
2
How do I fix CVE-2004-0947?
To fix CVE-2004-0947, upgrade unarj to version 2.63a-r2 or later.
3
What versions of unarj are affected by CVE-2004-0947?
CVE-2004-0947 affects unarj versions 2.62, 2.63_a, 2.64, and 2.65.
4
Can CVE-2004-0947 be exploited remotely?
Yes, CVE-2004-0947 can be exploited remotely via crafted ARJ archives with long filenames.
5
What type of attack can CVE-2004-0947 facilitate?
CVE-2004-0947 can facilitate arbitrary code execution on the victim's machine.