CVE-2006-5198

MEDIUM 4.0CVE-2006-5198 · Published 14/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
winzip winzip	`= 10.0`	No fix yet

Description

The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."

References

isc.sans.org/diary.php
secunia.com/advisories/22891
securitytracker.com/id
kb.cert.org/vuls/id/512804 · US Government Resource
securityfocus.com/archive/1/451589/100/0/threaded
securityfocus.com/bid/21060
vupen.com/english/advisories/2006/4509
winzip.com/wz7245.htm
zerodayinitiative.com/advisories/ZDI-06-040.html · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free