Description
Stack-based buffer overflow in (1) CxUux60.dll and (2) CxUux60u.dll, as used in SpeedProject products including (a) Squeez 5.0 Build 4285, and (b) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename.
References
- http://secunia.com/secunia_research/2005-60/advisory
- 1015265 vdb-entry
- ADV-2005-2570 vdb-entry
- 1015267 vdb-entry
- 20051124 Secunia Research: SpeedProject Products ZIP/UUE File ExtractionBuffer Overflow mailing-list
- 204 third-party-advisory
- 21073 vdb-entry
- 17420 third-party-advisory
- 1015266 vdb-entry