CVE-2006-0890

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-25 · updated 2026-06-16

Description

Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommander 11.01.4450, allows remote attackers to overwrite arbitrary files via unspecified manipulations in a (1) JAR or (2) ZIP archive.

Affected products

Speedproject Speedcommander: 11.01_build4450
Speedproject Squeez: 5.1
Speedproject Zipstar: 5.1

References

http://secunia.com/advisories/19006
http://www.osvdb.org/23465
http://www.securityfocus.com/archive/1/425973/100/0/threaded
http://www.securityfocus.com/bid/16807
http://www.vupen.com/english/advisories/2006/0731
https://exchange.xforce.ibmcloud.com/vulnerabilities/24909
http://secunia.com/advisories/19006
http://www.osvdb.org/23465
http://www.securityfocus.com/archive/1/425973/100/0/threaded
http://www.securityfocus.com/bid/16807
http://www.vupen.com/english/advisories/2006/0731
https://exchange.xforce.ibmcloud.com/vulnerabilities/24909

Get alerted when CVE-2006-0890 or the next vulnerability affects your stack