Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
References
| Link | Resource |
|---|---|
| http://secunia.com/advisories/22891 | Exploit Patch Vendor Advisory |
| http://www.kb.cert.org/vuls/id/225217 | Patch US Government Resource |
| http://www.securityfocus.com/archive/1/451566/100/0/threaded | |
| http://www.securityfocus.com/bid/21060 | Exploit Patch |
| http://www.securityfocus.com/bid/21108 | |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 | |
| https://www.exploit-db.com/exploits/2785 | |
| http://secunia.com/advisories/22891 | Exploit Patch Vendor Advisory |
| http://www.kb.cert.org/vuls/id/225217 | Patch US Government Resource |
| http://www.securityfocus.com/archive/1/451566/100/0/threaded | |
| http://www.securityfocus.com/bid/21060 | Exploit Patch |
| http://www.securityfocus.com/bid/21108 | |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 | |
| https://www.exploit-db.com/exploits/2785 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://secunia.com/advisories/22891 - Exploit, Patch, Vendor Advisory | |
| References | () http://www.kb.cert.org/vuls/id/225217 - Patch, US Government Resource | |
| References | () http://www.securityfocus.com/archive/1/451566/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/21060 - Exploit, Patch | |
| References | () http://www.securityfocus.com/bid/21108 - | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 - | |
| References | () https://www.exploit-db.com/exploits/2785 - |
Information
Published : 2006-11-21 22:07
Updated : 2024-11-21 00:14
NVD link : CVE-2006-3890
Mitre link : CVE-2006-3890
CVE.ORG link : CVE-2006-3890
JSON object : View
Products Affected
winzip
- winzip
sky_software
- fileview_activex_control
CWE