Unscored severity · published Nov 21, 2006
CVE-2006-3890
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to…
–
CVSS
14.6%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Fileview Activex Control · Sky Software
All versions, or not specified · source: NVD
WI
Winzip · Winzip
through 10.0; 7.0; 8.0; 8.1; 8.1; 9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3890
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3890
Exploit
http://secunia.com/advisories/22891
Patch
http://www.kb.cert.org/vuls/id/225217
www.securityfocus.com
http://www.securityfocus.com/archive/1/451566/100/0/threaded
Exploit
http://www.securityfocus.com/bid/21060
www.securityfocus.com
http://www.securityfocus.com/bid/21108
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067