critical9.3Public exploit code
CVE-2006-6884
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attack…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WinZip 10.0 - FileView ActiveX Controls Remote Overflow2006-12-31 · remote · windows · Verified
- WinZip 10.0.7245 - FileView ActiveX Remote Buffer Overflow2006-11-15 · remote · windows · Verified
- WinZip 10.0.7245 - FileView ActiveX Control Stack Overflow (PoC)2006-11-14 · dos · windows · Verified
Impact
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winzip | Winzip | Version 10.0_build_6667 |