CVE-2006-3890
CVE-2006-3890
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
Productos afectados
n/a · n/aPoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/2785no verificadoexploitdbwww.exploit-db.com/exploits/3420no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067http://secunia.com/advisories/22891https://www.exploit-db.com/exploits/2785http://www.kb.cert.org/vuls/id/225217http://www.securityfocus.com/archive/1/451566/100/0/threadedhttp://www.securityfocus.com/bid/21060http://www.securityfocus.com/bid/21108