CVE-2006-2909

CVE-2006-2909 describes a stack-based buffer overflow in PicoZip 4.01’s info tip shell extension (zipinfo.dll) that can be triggered when a user hovers over an ACE, RAR, or ZIP archive containing a very long filename. The vulnerability allows remote code execution under the user’s privileges and ...

CVE-2006-2909

Stack-based buffer overflow in the info tip shell extension zipinfo.dll in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an 1 ACE, 2 RAR, or 3 ZIP archive, which is triggered when the user moves the mouse over the archive...