CVE-2006-5198

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WinZip FileView - 'WZFILEVIEW.FileViewCtrl.61' ActiveX Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified

Impact

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."

Affected products

References

• NVD record
• CVE.org record
• http://isc.sans.org/diary.php?storyid=1861
• http://secunia.com/advisories/22891
• http://securitytracker.com/id?1017226
• http://www.kb.cert.org/vuls/id/512804
• http://www.securityfocus.com/archive/1/451589/100/0/threaded
• http://www.securityfocus.com/bid/21060
• http://www.vupen.com/english/advisories/2006/4509
• http://www.winzip.com/wz7245.htm
• http://www.zerodayinitiative.com/advisories/ZDI-06-040.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
• http://isc.sans.org/diary.php?storyid=1861
• http://secunia.com/advisories/22891
• http://securitytracker.com/id?1017226
• http://www.kb.cert.org/vuls/id/512804
• http://www.securityfocus.com/archive/1/451589/100/0/threaded
• http://www.securityfocus.com/bid/21060
• http://www.vupen.com/english/advisories/2006/4509
• http://www.winzip.com/wz7245.htm
• http://www.zerodayinitiative.com/advisories/ZDI-06-040.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067