Lucene search

[email protected]CVE-2006-2085

HistoryApr 29, 2006 - 10:02 a.m.

CVE-2006-2085

2006-04-2910:02:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2006-2085

buffer overflow

remote code execution

speedproject squeez

speedcommander

8 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.085 Low

EPSS

Percentile

94.3%

JSON

Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.

CPENameOperatorVersion
speedproject:speedcommanderspeedproject speedcommandereq10.52_build4450
speedproject:squeezspeedproject squeezeq5.10_build_4460
speedproject:speedcommanderspeedproject speedcommandereq11.01_build4450

CPE	Name	Operator	Version
speedproject:speedcommander	speedproject speedcommander	eq	10.52_build4450
speedproject:squeez	speedproject squeez	eq	5.10_build_4460
speedproject:speedcommander	speedproject speedcommander	eq	11.01_build4450

References

secunia.com/advisories/19473

secunia.com/secunia_research/2006-23/advisory

securityreason.com/securityalert/820

securitytracker.com/id?1016002

securitytracker.com/id?1016003

www.osvdb.org/24990

www.securityfocus.com/archive/1/432101/100/0/threaded

www.securityfocus.com/bid/17709

www.speedproject.de/enu/

www.vupen.com/english/advisories/2006/1535

exchange.xforce.ibmcloud.com/vulnerabilities/26115

8 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.085 Low

EPSS

Percentile

94.3%

JSON

Related for CVE-2006-2085

prion1 kaspersky1