CVE-2006-4554

Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including (1) Tumbleweed EMF, (2) VCOM/Ontrack PowerDesk Pro, (3) Canyon Drag and Zip, (4) Canyon Power File, and (5) Canyon Power File Gold, allow context-dependent attackers to execute arbitrary code via an inconsistent size parameter in a ZOO file header.

• http://secunia.com/advisories/21714
• http://secunia.com/advisories/21718
• http://secunia.com/advisories/21720
• http://secunia.com/advisories/21750
• http://secunia.com/advisories/21751
• http://securityreason.com/securityalert/1498
• http://www.becubed.com/downloads/compfix.txtURL Repurposed
• http://www.mnin.org/advisories/2006_cp5_tweed.pdfExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/444881/100/0/threaded
• http://www.securityfocus.com/bid/19796
• http://www.vupen.com/english/advisories/2006/3428
• http://www.vupen.com/english/advisories/2006/3429
• http://www.vupen.com/english/advisories/2006/3437
• http://www.vupen.com/english/advisories/2006/3438
• http://www.vupen.com/english/advisories/2006/3439
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28693
• http://secunia.com/advisories/21714
• http://secunia.com/advisories/21718
• http://secunia.com/advisories/21720
• http://secunia.com/advisories/21750
• http://secunia.com/advisories/21751
• http://securityreason.com/securityalert/1498
• http://www.becubed.com/downloads/compfix.txtURL Repurposed
• http://www.mnin.org/advisories/2006_cp5_tweed.pdfExploit, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/444881/100/0/threaded
• http://www.securityfocus.com/bid/19796
• http://www.vupen.com/english/advisories/2006/3428
• http://www.vupen.com/english/advisories/2006/3429
• http://www.vupen.com/english/advisories/2006/3437
• http://www.vupen.com/english/advisories/2006/3438
• http://www.vupen.com/english/advisories/2006/3439
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28693

Published

Sep 6, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4548e107 0.75 and earlier does not properly unset variables when…
• CVE-2006-4549CHXO Feedsplitter 2006-01-21 allows remote attackers to read…
• CVE-2006-4550Directory traversal vulnerability in CHXO Feedsplitter 2006-…
• CVE-2006-4551Eval injection vulnerability in CHXO Feedsplitter 2006-01-21…
• CVE-2006-4552Cross-site scripting (XSS) vulnerability in CHXO Feedsplitte…
• CVE-2006-4553PHP remote file inclusion vulnerability in plugin.class.php …
• CVE-2006-4555Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX…
• CVE-2006-4556PHP remote file inclusion vulnerability in index.php in the …
• CVE-2006-4557PHP remote file inclusion vulnerability in plugins/plugins.p…
• CVE-2006-4558DeluxeBB 1.06 and earlier, when run on the Apache HTTP Serve…
• CVE-2006-4559Multiple PHP remote file inclusion vulnerabilities in Yet An…
• CVE-2006-4560Internet Explorer 6 on Windows XP SP2 allows remote attacker…