CVE-2006-3890: Buffer Overflow
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3890?
CVE-2006-3890 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-3890?
To address CVE-2006-3890, you should update to a patched version of WinZip that is newer than version 10.0.
Which applications are affected by CVE-2006-3890?
CVE-2006-3890 affects WinZip versions 7.0 to 10.0 and the Sky Software FileView ActiveX control.
What type of vulnerability is CVE-2006-3890?
CVE-2006-3890 is a stack-based buffer overflow vulnerability that can be exploited to execute arbitrary code.
Can CVE-2006-3890 be exploited remotely?
Yes, CVE-2006-3890 can be exploited remotely by attackers through specially crafted inputs to the affected applications.