CVE-2006-2161

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-09 · updated 2026-06-16

Description

Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name.

Affected products

Cam Development Cam Unzip: 4.0, 4.3
Erik Dienske Abakt: 0.9.2, 0.9.3_beta1
Roger Aelbrecht Tzipbuilder: 1.79.03.01

References

http://marc.info/?l=full-disclosure&m=114771024009857&w=2
http://secunia.com/advisories/19945
http://secunia.com/advisories/19946
http://secunia.com/advisories/20068
http://secunia.com/secunia_research/2006-26/advisory
http://secunia.com/secunia_research/2006-31/advisory/
http://secunia.com/secunia_research/2006-34/advisory/
http://securityreason.com/securityalert/853
http://securitytracker.com/id?1016064
http://securitytracker.com/id?1016107
http://www.securityfocus.com/archive/1/433257/100/0/threaded
http://www.securityfocus.com/archive/1/434019/100/0/threaded

Get alerted when CVE-2006-2161 or the next vulnerability affects your stack