CVE-2006-3890
published 2006-11-21CVE-2006-3890: Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
14.46%
96.2th percentile
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| winzip | winzip | <= 10.0 | — |
| winzip | winzip | — | — |
| winzip | winzip | — | — |
| winzip | winzip | — | — |
| winzip | winzip | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
WinZip up to 10.0 FileView ActiveX Control stack-based overflow (VU#225217 / EDB-2785)
vuldb·2026-04-28·CVSS 9.3
CVE-2006-3890 [CRITICAL] WinZip up to 10.0 FileView ActiveX Control stack-based overflow (VU#225217 / EDB-2785)
A vulnerability was found in WinZip 7.0/8.0/8.1/9.0/10.0. It has been classified as problematic. This impacts an unknown function of the component FileView ActiveX Control. The manipulation leads to stack-based buffer overflow.
This vulnerability is listed as CVE-2006-3890. The attack may be initiated remotely. In addition, an exploit is available.
Applying a patch is the recommended action to fix this issue.
GHSA
GHSA-h93x-p3vc-8fx7: Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, al
ghsa_unreviewed·2022-05-01·CVSS 4.0
CVE-2006-3890 [MEDIUM] GHSA-h93x-p3vc-8fx7: Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, al
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/22891http://www.kb.cert.org/vuls/id/225217http://www.securityfocus.com/archive/1/451566/100/0/threadedhttp://www.securityfocus.com/bid/21060http://www.securityfocus.com/bid/21108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067https://www.exploit-db.com/exploits/2785http://secunia.com/advisories/22891http://www.kb.cert.org/vuls/id/225217http://www.securityfocus.com/archive/1/451566/100/0/threadedhttp://www.securityfocus.com/bid/21060http://www.securityfocus.com/bid/21108https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067https://www.exploit-db.com/exploits/2785
2006-11-21
Published