CVE-2005-3832

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-26 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in (1) CxUux60.dll and (2) CxUux60u.dll, as used in SpeedProject products including (a) Squeez 5.0 Build 4285, and (b) SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename.

Affected products

Speedproject Speedcommander: 10.51_build4430, 11.0_build4430
Speedproject Squeez: 5.0_build_4285

References

http://secunia.com/advisories/17420
http://secunia.com/secunia_research/2005-60/advisory
http://securityreason.com/securityalert/204
http://securitytracker.com/id?1015265
http://securitytracker.com/id?1015266
http://securitytracker.com/id?1015267
http://www.osvdb.org/21073
http://www.securityfocus.com/archive/1/417588/30/0/threaded
http://www.vupen.com/english/advisories/2005/2570
http://secunia.com/advisories/17420
http://secunia.com/secunia_research/2005-60/advisory
http://securityreason.com/securityalert/204

Get alerted when CVE-2005-3832 or the next vulnerability affects your stack