PT-2006-1936 · Speedproject+1 · Speedcommander+2

Published 2006-02-25 · Updated 2018-10-18 · CVE-2006-0890

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SpeedProject Squeez version 5.1 ZipStar version 5.1 SpeedCommander version 11.01.4450

Description The issue allows remote attackers to overwrite arbitrary files via manipulations in a JAR or ZIP archive.

Recommendations For SpeedProject Squeez version 5.1, update to a version that fixes this issue. For ZipStar version 5.1, update to a version that fixes this issue. For SpeedCommander version 11.01.4450, update to a version that fixes this issue.

Fix

Related Identifiers

CVE-2006-0890

Affected Products

Speedcommander

Speedproject Squeez

Zipstar

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-0890 · Security Note
• http://secunia.com/advisories/19006 · Note
• http://vupen.com/english/advisories/2006/0731 · Note
• http://osvdb.org/23465 · Note
• http://securityfocus.com/bid/16807 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24909 · Note
• http://securityfocus.com/archive/1/425973/100/0/threaded · Note