Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个SpeedProject产品ACE文档文件名处理溢出漏洞
Vulnerability Description
Squeez是由SpeedProject发布的文件压缩工具，SpeedCommander是该公司发布的文件管理器。 Squeez及SpeedCommander在处理某些畸形文件名存在缓冲区溢出漏洞，攻击者可能利用此漏洞在目标用户机器上执行任意指令。 SqueezSpeed及Commander的CxAce60.dll和CxAce60u.dll在处理包含有超长文件名的ACE文档时存在栈溢出漏洞。攻击者可以通过诱骗用户解压特制的文档导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A