CVE-2006-2085: Speedproject Speedcommander

Medium severity, CVSS 5.1. EPSS: 4.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedCommander 10.52 Build 4450 and 11.01 Build 4450, allow user-assisted remote attackers to execute arbitrary code via an ACE archive that contains a file with a long filename.

Affected products

• Speedproject Speedcommander: version 10.52_build4450 only; version 11.01_build4450 only
• Speedproject Squeez: version 5.10_build_4460 only

Published 2006-04-29. Last modified 2026-06-16.