Unscored severity · published Dec 31, 2006
CVE-2006-6884
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute…
–
CVSS
4.7%
EPSS
No
On KEV
Description
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winzip · Winzip
10.0_build_6667 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6884
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6884
www.securityfocus.com
http://www.securityfocus.com/archive/1/455608/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/455612/100/0/threaded
More from Winzip
8.8
CVE-2025-1240
WinZip 7Z File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
7.8
CVE-2024-8811
WinZip Mark-of-the-Web Bypass Vulnerability
–
CVE-2008-3442
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as…
–
CVE-2007-0264
Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line…
–
CVE-2006-3890
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to…