EUVD-2006-2086

Malware in sbrugna...

Speed Commander 13.10 Memory Corruption

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Buffer overflow

Multiple buffer overflows in 1 CxAce60.dll and 2 CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename...

CVE-2006-2085

Multiple buffer overflows in 1 CxAce60.dll and 2 CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename...

CVE-2006-2085

Affected software/components: SpeedProject Squeez (version 5.10 Build 4460) and SpeedCommander (versions 10.52 Build 4450 and 11.01 Build 4450). Vulnerability: Multiple buffer overflows in CxAce60.dll and CxAce60u.dll used by these products when processing ACE archives with a long filename. Root ...

CVE-2006-2085

Multiple buffer overflows in 1 CxAce60.dll and 2 CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename...

[SA19473] SpeedProject Products ACE Archive Handling Buffer Overflow

TITLE: SpeedProject Products ACE Archive Handling Buffer Overflow SECUNIA ADVISORY ID: SA19473 VERIFY ADVISORY: http://secunia.com/advisories/19473/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Speedproject SpeedCommander 10.x http://secunia.com/product/6185/...

CVE-2006-0890

CVE-2006-0890 describes a directory traversal vulnerability in SpeedProject Squeez 5.1, used by ZipStar 5.1 and SpeedCommander 11.01.4450. The flaw allows remote attackers to overwrite arbitrary files via unspecified manipulations in a (1) JAR or (2) ZIP archive. The underlying issue is a directo...

SpeedCommander 11.0 & ZipStar 5.1 & Squeez 5.1 Directory traversal

SpeedCommander 11.0 & ZipStar 5.1 & Squeez 5.1 Directory traversal The StuffIt and ZipMagic Family of products is designed to meet any level of compression needs; from basic expansion to advanced archive manipulation, to automating routine compression tasks, and even building compression into a...

KLA10339 WLF vulnerability in SpeedProject

A directory traversal vulnerability was found in SpeedProject products. By exploiting this vulnerability malicious users can overwrite local files. This vulnerability can be exploited remotely at a point related to the JAR and ZIP archives. Original advisories - Related products...

CVE-2005-3831

The CVE-2005-3831 issue is a stack-based buffer overflow in two DLLs, CxZIP60.dll and CxZIP60u.dll, used by SpeedProject products (ZipStar 5.0 Build 4285, Squeez 5.0 Build 4285, SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The overflow is triggered by processing a ZIP archive containing ...

CVE-2005-3831

Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...

CVE-2005-3832

Stack-based buffer overflow in 1 CxUux60.dll and 2 CxUux60u.dll, as used in SpeedProject products including a Squeez 5.0 Build 4285, and b SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...

CVE-2005-3832

CVE-2005-3832 describes a stack-based buffer overflow in CxUux60.dll and CxUux60u.dll used by SpeedProject products (Squeez 5.0 Build 4285; SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The vulnerability allows user-assisted attackers to execute arbitrary code via a ZIP archive containing...

Directory traversal vulnerabilities in several archivers processing .tar

Subject Directory traversal vulnerabilities in several archivers processing .tar files Author Florian "sticky bit" Schafferhans [email protected] http://www.computer-security.de/ Date 17. December 2002 Affected GNU cpio 2.5 http://www.gnu.org/ tested on Linux 2.2.19 Winzip Computing WinZip...