← Vulnerability feed

Vulnerability record · CVE-2005-2384 · published 27 July 2005

CVE-2005-2384: Alwil avast antivirus vulnerability

Alwil · Avast Antivirus

Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or (2) absolute pathnames.

5.0 CVSS 2.0 Medium EPSS 3.5% · top 11.3%
5.0CVSS 2.0 base score
3.5%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Directory traversal vulnerability in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition 4.6.460, allows remote attackers to write arbitrary files via an ACE archive containing filenames with (1) .. or (2) absolute pathnames.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/15776 PatchVendor Advisory
http://secunia.com/secunia_research/2005-20/advisory/ PatchVendor Advisory
http://securitytracker.com/id?1014544
http://www.avast.com/eng/av4_revision_history.html
http://secunia.com/advisories/15776 PatchVendor Advisory
http://secunia.com/secunia_research/2005-20/advisory/ PatchVendor Advisory
http://securitytracker.com/id?1014544
http://www.avast.com/eng/av4_revision_history.html

Track CVE-2005-2384 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-2869Alwil avast antivirus vulnerabilityUnspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.EPSS 1.7%7.5CVE-2006-4626Alwil avast antivirus vulnerabilityHeap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file …EPSS 4.7%7.5CVE-2005-2385Alwil avast antivirus vulnerabilityBuffer overflow in a third-party compression library (UNACEV2.DLL), as used in avast! Antivirus Home/Professional Edition 4.6.665 and Server Edition …EPSS 4.0%7.5CVE-2005-1719Alwil avast antivirus vulnerabilityUnknown vulnerability in ALWIL avast! antivirus 4 (4.6.6230) and earlier, when running on Windows NT 4.0, does not properly detect certain viruses.EPSS 1.4%7.2CVE-2006-1355Alwil avast antivirus vulnerabilityavast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local user…EPSS 0.39%7.2CVE-2005-1770Alwil avast antivirus memory buffer overflow vulnerabilityBuffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (sy…EPSS 0.68%5.1CVE-2005-3214Alwil avast antivirus vulnerabilityMultiple interpretation error in unspecified versions of Avast Antivirus allows remote attackers to bypass virus detection via a malicious executable…EPSS 1.7%4.9CVE-2006-1892Alwil avast antivirus vulnerabilityavast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary dir…EPSS 0.49%

Source: NIST National Vulnerability Database (record CVE-2005-2384), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.