SpeedCommander version 11.0, ZipStar version 5.1, and Squeez version 5.1 all suffer from directory traversal vulnerabilities when processing malicious JAR and ZIP files.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/44187/SpeedCommander.txt
Source: https://packetstormsecurity.com/files/44187/SpeedCommander.txt.html