KLA10339 WLF vulnerability in SpeedProject

A directory traversal vulnerability was found in SpeedProject products. By exploiting this vulnerability malicious users can overwrite local files. This vulnerability can be exploited remotely at a point related to the JAR and ZIP archives.

Original advisories

Related products

Speedproject-SpeedCommander

Speedproject-ZipStar

Speedproject-Squeez

CVE list

CVE-2006-0890 critical

Solution

Update to latest version

Impacts

• WLF

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.

Affected Products

• SpeedProject Squeez version 5.1SpeedProject ZipStar 5.1SpeedProject SpeedCommander 11.01.4450