CVE-2007-6563: Winace

High severity, CVSS 10.0. EPSS: 5.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in WinAce 2.65 and earlier, and possibly other versions before 2.69, allows user-assisted remote attackers to execute arbitrary code via a long filename in a compressed UUE archive.

Affected products

  • Winace Winace: up to and including 2.65

Published 2007-12-28. Last modified 2026-06-16.