KLA10125 ACE vulnerability in Compression Plus

A buffer overflow was found in the Compression Plus library. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ZOO file.

Original advisories

BeCubed changelog

Related products

Compression-Plus

CVE list

CVE-2006-4554 high

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• BeCubed Compression Plus verrsions 5.0.1.27 and earlier