Lucene search

[email protected]CVE-2005-3832

HistoryNov 26, 2005 - 7:03 p.m.

CVE-2005-3832

2005-11-2619:03:00

CWE-119

[email protected]

web.nvd.nist.gov

cve

2005

3832

buffer overflow

cxuux60.dll

cxuux60u.dll

speedproject

squeez

speedcommander

zip archive

nvd

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

Stack-based buffer overflow in (1) CxUux60.dll and (2) CxUux60u.dll, as used in SpeedProject products including (a) Squeez 5.0 Build 4285, and (b) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename.

Affected configurations

NVD

Node

speedprojectspeedcommanderMatch10.51_build4430

speedprojectspeedcommanderMatch11.0_build4430

speedprojectsqueezMatch5.0_build_4285

CPENameOperatorVersion
speedproject:speedcommanderspeedproject speedcommandereq10.51_build4430
speedproject:speedcommanderspeedproject speedcommandereq11.0_build4430
speedproject:squeezspeedproject squeezeq5.0_build_4285

CPE	Name	Operator	Version
speedproject:speedcommander	speedproject speedcommander	eq	10.51_build4430
speedproject:speedcommander	speedproject speedcommander	eq	11.0_build4430
speedproject:squeez	speedproject squeez	eq	5.0_build_4285

References

secunia.com/advisories/17420

secunia.com/secunia_research/2005-60/advisory

securityreason.com/securityalert/204

securitytracker.com/id?1015265

securitytracker.com/id?1015266

securitytracker.com/id?1015267

www.osvdb.org/21073

www.securityfocus.com/archive/1/417588/30/0/threaded

www.vupen.com/english/advisories/2005/2570

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

Related for CVE-2005-3832

cvelist1 nvd1