TUCoPS :: Linux :: Apps A-M :: bt1678.txt

buffer overflow in unace (linux extractor for .ace files)


Hello,

I have discover a realy simple buffer overflow in unace(www.winace.com)
command.

normally if you put a wrong filename:
[root@megahz root]# ./unace e aa.ace
 
UNACE v2.2     Copyright by ACE Compression Software       May  9 2002
10:59:42
                                                                           
Error: No such archive found:
 /root/aa.ace
[root@megahz root]#
====================================================================================

the buffer overflow

[root@megahz root]# ./unace e aaaaaa(a*600).ace
 
UNACE v2.2     Copyright by ACE Compression Software       May  9 2002
10:59:42
                                                                          Segmentation fault
[root@megahz root]#

====================================================================================

winace was contacted about this.



MegaHz
www.megahz.org
www.cyhackportal.com

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH