Unscored severity · published Nov 14, 2006
CVE-2006-5198
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code…
–
CVSS
62.1%
EPSS
No
On KEV
Description
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."
Exploitation
Is it being used?
Exploit prediction (EPSS)62.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winzip · Winzip
10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5198
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5198
isc.sans.org
http://isc.sans.org/diary.php?storyid=1861
secunia.com
http://secunia.com/advisories/22891
securitytracker.com
http://securitytracker.com/id?1017226
US Government Resource
http://www.kb.cert.org/vuls/id/512804
www.securityfocus.com
http://www.securityfocus.com/archive/1/451589/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/21060
More from Winzip
8.8
CVE-2025-1240
WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
7.8
CVE-2024-8811
WinZip Mark-of-the-Web Bypass Vulnerability
–
CVE-2008-3442
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as…
–
CVE-2007-0264
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line…
–
CVE-2006-6884
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute…