CVE-2006-3890
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 14%
from disclosure to weapon105 days
Published on NVDNov 21
1st PoC+105d
exploitation probability
14%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/2785unverifiedexploitdbwww.exploit-db.com/exploits/3420unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067http://secunia.com/advisories/22891https://www.exploit-db.com/exploits/2785http://www.kb.cert.org/vuls/id/225217http://www.securityfocus.com/archive/1/451566/100/0/threadedhttp://www.securityfocus.com/bid/21060http://www.securityfocus.com/bid/21108