CVE-2006-5198
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
7.5 High
AI Score
Confidence
Low
0.963 High
EPSS
Percentile
99.5%
The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software “FileView” ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified “unsafe methods.”
Affected configurations
References
isc.sans.org/diary.php?storyid=1861
secunia.com/advisories/22891
securitytracker.com/id?1017226
www.kb.cert.org/vuls/id/512804
www.securityfocus.com/archive/1/451589/100/0/threaded
www.securityfocus.com/bid/21060
www.vupen.com/english/advisories/2006/4509
www.winzip.com/wz7245.htm
www.zerodayinitiative.com/advisories/ZDI-06-040.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
Related
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:P/A:N
7.5 High
AI Score
Confidence
Low
0.963 High
EPSS
Percentile
99.5%