PT-2006-1936 · Speedproject+1 · Speedcommander+2

Publicado 2006-02-25 · Atualizado 2018-10-18 · CVE-2006-0890

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SpeedProject Squeez version 5.1 ZipStar version 5.1 SpeedCommander version 11.01.4450

Description The issue allows remote attackers to overwrite arbitrary files via manipulations in a JAR or ZIP archive.

Recommendations For SpeedProject Squeez version 5.1, update to a version that fixes this issue. For ZipStar version 5.1, update to a version that fixes this issue. For SpeedCommander version 11.01.4450, update to a version that fixes this issue.

Correção

Identificadores relacionados

CVE-2006-0890

Produtos afetados

Speedcommander

Speedproject Squeez

Zipstar

Referências · 7

• http://secunia.com/advisories/19006 · Nota
• http://vupen.com/english/advisories/2006/0731 · Nota
• http://osvdb.org/23465 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0890 · Nota de Segurança
• http://securityfocus.com/bid/16807 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24909 · Nota
• http://securityfocus.com/archive/1/425973/100/0/threaded · Nota