CVE-2006-5198 EXPLOIT
4.0
MEDIUM · CVSS 2.0 · EPSS 60.4% (pctl 99)
Patch early
A public exploit exists.
Description
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."
Scoring
| CVSS | 4.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:P/I:P/A:N |
| EPSS | 60.44% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-11-14 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| winzip | winzip |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | WinZip FileView - 'WZFILEVIEW.FileViewCtrl.61' ActiveX Buffer Overflow (Metasploit) | 2010-04-30 |
References
- http://isc.sans.org/diary.php?storyid=1861
- http://secunia.com/advisories/22891
- http://securitytracker.com/id?1017226
- http://www.kb.cert.org/vuls/id/512804
- http://www.securityfocus.com/archive/1/451589/100/0/threaded
- http://www.securityfocus.com/bid/21060
- http://www.vupen.com/english/advisories/2006/4509
- http://www.winzip.com/wz7245.htm
- http://www.zerodayinitiative.com/advisories/ZDI-06-040.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
- http://isc.sans.org/diary.php?storyid=1861
- http://secunia.com/advisories/22891
- http://securitytracker.com/id?1017226
- http://www.kb.cert.org/vuls/id/512804
- http://www.securityfocus.com/archive/1/451589/100/0/threaded
- http://www.securityfocus.com/bid/21060
- http://www.vupen.com/english/advisories/2006/4509
- http://www.winzip.com/wz7245.htm
- http://www.zerodayinitiative.com/advisories/ZDI-06-040.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
→ the Explorer · watch your stack · NVD