Buffer overflow in Winzip

CVE-2006-6884

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.

Vulnerability class: Buffer Overflow

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

  • Winzip — versions 10.0_build_6667
  • N/a — versions n/a

Weakness classification (CWE)

References