CVE-2006-3890
Sky Software FileView ActiveX Control - Stack-Based Buffer Overflow via FilePattern Attribute
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-3890. PoCs published by prdelka.
AI-analyzed exploit summary This exploit leverages a heap spray technique to trigger a buffer overflow in WinZip's WZFILEVIEW ActiveX control (CVE-2006-3890), executing a bindshell on port 28876. The shellcode is embedded in the HTML and sprayed across memory to achieve reliable execution.
Description
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.
Exploits (2)
This exploit leverages a heap spray technique to trigger a buffer overflow in WinZip's WZFILEVIEW ActiveX control (CVE-2006-3890), executing a bindshell on port 28876. The shellcode is embedded in the HTML and sprayed across memory to achieve reliable execution.
This exploit targets a stack-based buffer overflow in the WinZip FileView ActiveX control (CVE-2006-6884). It generates a malicious HTML page and embeds shellcode within a BMP image to achieve remote code execution when a user visits the page.