PatchTheCVEsqueez vulnerabilities and fixes
Recent CVEs affecting squeez, with upgrade or downgrade steps. 4 tracked.
squeez has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2006-04-29. Highest priority: CVE-2006-2085 (score 41/100).
- CVE-2006-2085 MEDIUM 5.1 DOWNGRADE DOWNGRADE Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and
- CVE-2006-0890 MEDIUM 5.0 DOWNGRADE DOWNGRADE Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommande
- CVE-2005-3832 MEDIUM 5.1 DOWNGRADE DOWNGRADE Stack-based buffer overflow in (1) CxUux60.dll and (2) CxUux60u.dll, as used in SpeedProject products includin
- CVE-2005-3831 MEDIUM 5.1 DOWNGRADE DOWNGRADE Stack-based buffer overflow in (1) CxZIP60.dll and (2) CxZIP60u.dll, as used in SpeedProject products includin
FAQ
How do I fix squeez vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is squeez being exploited right now?
None of the tracked squeez CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which squeez CVE should I patch first?
CVE-2006-2085 currently ranks highest (41/100): Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and .