CVE-2015-2063

Name of the Vulnerable Software and Affected Versions unace version 1.2b

Description The issue is caused by an integer overflow in the handling of ace archives, which can lead to a denial of service (crash) when a small file header is encountered. This is triggered by a buffer overflow.

Recommendations For unace version 1.2b, consider updating to a newer version that addresses this issue, as using a small file header in an ace archive can cause a crash due to the integer overflow and subsequent buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.