Vulnerability record · CVE-2005-3194 · published 14 October 2005

CVE-2005-3194: Estsoft alzip vulnerability

Estsoft · Alzip

Multiple buffer overflows in ALZip 6.12 (Korean), 6.1 (International), and 5.52 (English) allow remote attackers to execute arbitrary code via a long filename in a compressed (1) ALZ, (2) ARJ, (3) ZIP, (4) UUE, or (5) XXE archive.

5.1 CVSS 2.0 Medium EPSS 3.1% · top 12.8%

5.1CVSS 2.0 base score

3.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

14References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Alzip Estsoft

References

Link	Tags
http://secunia.com/advisories/16847/	Vendor Advisory
http://secunia.com/secunia_research/2005-49/advisory/	Vendor Advisory
http://securitytracker.com/id?1015003
http://www.osvdb.org/19889
http://www.osvdb.org/19890
http://www.securityfocus.com/bid/15010
https://exchange.xforce.ibmcloud.com/vulnerabilities/22526
http://secunia.com/advisories/16847/	Vendor Advisory
http://secunia.com/secunia_research/2005-49/advisory/	Vendor Advisory
http://securitytracker.com/id?1015003
http://www.osvdb.org/19889
http://www.osvdb.org/19890
http://www.securityfocus.com/bid/15010
https://exchange.xforce.ibmcloud.com/vulnerabilities/22526

Track CVE-2005-3194 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2011-1336Estsoft alzip memory buffer overflow vulnerabilityBuffer overflow in ALZip 8.21 and earlier allows remote attackers to execute arbitrary code via a crafted mim file.EPSS 5.5%7 Jul 2011 7.8CVE-2019-12807Estsoft alzip memory buffer overflow vulnerabilityAlzip 10.83 and earlier version contains a stack-based buffer overflow vulnerability, caused by improper bounds checking during the parsing of crafte…EPSS 1.6%13 Aug 2019 7.8CVE-2018-5196Estsoft alzip out-of-bounds write vulnerabilityAlzip 10.76.0.0 and earlier is vulnerable to a stack overflow caused by improper bounds checking. By persuading a victim to open a specially-crafted …EPSS 1.4%21 Dec 2018 7.8CVE-2018-10027Estsoft alzip untrusted search path vulnerabilityESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory:…EPSS 0.43%17 May 2018 7.8CVE-2017-11323Estsoft alzip memory buffer overflow vulnerabilityStack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, as …EPSS 3.0%19 Aug 2017

Source: NIST National Vulnerability Database (record CVE-2005-3194), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.