WinZip ActiveX Control Instantiation Buffer Overflow (CVE-2006-5198; CVE-2006-6884)

WinZip is a file archiver and compressor for Microsoft Windows. The vulnerability is due to an error in the WinZip FileView ActiveX control WZFILEVIEW.FileViewCtrl.61. To trigger the vulnerability, an attacker can create a malicious web page that initiates the vulnerable ActiveX control with a lo...

CVE-2006-6884

A buffer overflow exists in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (also known as the Sky Software "FileView" ActiveX control) within WinZip 10.0 Build 6667 . The vulnerability is triggered by providing a long argument to the CreateNewFolderFromName method, allowing remote attackers to ex...