CVE-2006-5198

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:N

Exploitability : 4.9 / Impact : 4.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-06-040.html	Vendor Advisory
http://www.winzip.com/wz7245.htm
http://secunia.com/advisories/22891
http://isc.sans.org/diary.php?storyid=1861
http://www.kb.cert.org/vuls/id/512804	US Government Resource
http://www.securityfocus.com/bid/21060
http://securitytracker.com/id?1017226
http://www.vupen.com/english/advisories/2006/4509
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
http://www.securityfocus.com/archive/1/451589/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:winzip:winzip:10.0:*:*:*:*:*:*:*

Information

Published : 2006-11-14 13:07

Updated : 2018-10-17 14:41

NVD link : CVE-2006-5198

Mitre link : CVE-2006-5198

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

winzip

winzip

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.zerodayinitiative.com/advisories/ZDI-06-040.html", "name": "http://www.zerodayinitiative.com/advisories/ZDI-06-040.html", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.winzip.com/wz7245.htm", "name": "http://www.winzip.com/wz7245.htm", "tags": [], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/22891", "name": "22891", "tags": [], "refsource": "SECUNIA"}, {"url": "http://isc.sans.org/diary.php?storyid=1861", "name": "http://isc.sans.org/diary.php?storyid=1861", "tags": [], "refsource": "MISC"}, {"url": "http://www.kb.cert.org/vuls/id/512804", "name": "VU#512804", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.securityfocus.com/bid/21060", "name": "21060", "tags": [], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1017226", "name": "1017226", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2006/4509", "name": "ADV-2006-4509", "tags": [], "refsource": "VUPEN"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067", "name": "MS06-067", "tags": [], "refsource": "MS"}, {"url": "http://www.securityfocus.com/archive/1/451589/100/0/threaded", "name": "20061114 ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software \"FileView\" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified \"unsafe methods.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-5198", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2006-11-14T21:07Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:winzip:winzip:10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-17T21:41Z"}