CVE-2006-5198

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 60%

from disclosure to weapon1263 days

Published on NVDNov 14

1st PoC+1263d

metasploit+353d

exploitation probability

60%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16607unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://isc.sans.org/diary.php?storyid=1861 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 http://secunia.com/advisories/22891 http://securitytracker.com/id?1017226 http://www.kb.cert.org/vuls/id/512804 http://www.securityfocus.com/archive/1/451589/100/0/threaded http://www.securityfocus.com/bid/21060 http://www.vupen.com/english/advisories/2006/4509 http://www.winzip.com/wz7245.htm http://www.zerodayinitiative.com/advisories/ZDI-06-040.html