CVE-2006-5198

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."

CVSS v2.0 NVD

4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:N

EPSS

62.12% chance of exploitation in the next 30 days, 99th percentile

Published

2006-11-14

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/winzip_fileview…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16607

Security advisories

• http://www.zerodayinitiative.com/advisories/ZDI-06-040.html
• http://www.kb.cert.org/vuls/id/512804
• http://www.securityfocus.com/bid/21060
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067

References

• CVE Record
• NVD entry