Description
Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.
References
- ADV-2006-1535 vdb-entry
- 20060426 Secunia Research: SpeedProject Products ACE Archive HandlingBuffer Overflow mailing-list
- speedproject-ace-bo(26115) vdb-entry
- http://www.speedproject.de/enu/
- 24990 vdb-entry
- 19473 third-party-advisory
- http://secunia.com/secunia_research/2006-23/advisory
- 17709 vdb-entry
- 820 third-party-advisory
- 1016003 vdb-entry
- 1016002 vdb-entry