CVE:CVE-2005-3862
CNNVD:CNNVD-200511-446
unalz是ALZ文档的解压程序。
unalz 0.53之前版本存在缓冲区溢出，可让溢出攻击者通过ALZ归档文件中的长文件名执行任意代码。
solution:Upgrade unalz unalz to a higher version than 0.2,0.3,0.4,0.5,0.22,0.23,0.31,0.51,0.52,and avoid the version 0.2,0.3,0.4,0.5,0.22,0.23,0.31,0.51,0.52