CVE-2006-6884

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-31 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.

Affected products

WinZip Computing WinZip: 10.0_build_6667

References

http://www.securityfocus.com/archive/1/455608/100/0/threaded
http://www.securityfocus.com/archive/1/455612/100/0/threaded
http://www.securityfocus.com/archive/1/455608/100/0/threaded
http://www.securityfocus.com/archive/1/455612/100/0/threaded

Get alerted when CVE-2006-6884 or the next vulnerability affects your stack