4 matches found
CVE-2006-2085
Affected software/components: SpeedProject Squeez (version 5.10 Build 4460) and SpeedCommander (versions 10.52 Build 4450 and 11.01 Build 4450). Vulnerability: Multiple buffer overflows in CxAce60.dll and CxAce60u.dll used by these products when processing ACE archives with a long filename. Root ...
CVE-2006-0890
CVE-2006-0890 describes a directory traversal vulnerability in SpeedProject Squeez 5.1, used by ZipStar 5.1 and SpeedCommander 11.01.4450. The flaw allows remote attackers to overwrite arbitrary files via unspecified manipulations in a (1) JAR or (2) ZIP archive. The underlying issue is a directo...
CVE-2005-3832
CVE-2005-3832 describes a stack-based buffer overflow in CxUux60.dll and CxUux60u.dll used by SpeedProject products (Squeez 5.0 Build 4285; SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The vulnerability allows user-assisted attackers to execute arbitrary code via a ZIP archive containing...
CVE-2005-3831
The CVE-2005-3831 issue is a stack-based buffer overflow in two DLLs, CxZIP60.dll and CxZIP60u.dll, used by SpeedProject products (ZipStar 5.0 Build 4285, Squeez 5.0 Build 4285, SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The overflow is triggered by processing a ZIP archive containing ...