Exploitation Summary
CVE-2006-6884 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including XiaoHui, prdelka.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in WinZip's FileView ActiveX Control (CVE-2006-6884) via heap spraying and a crafted string passed to CreateNewFolderFromName. It achieves remote code execution by overwriting memory with shellcode.
Description
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.
Exploits (3)
This exploit targets a buffer overflow vulnerability in WinZip's FileView ActiveX Control (CVE-2006-6884) via heap spraying and a crafted string passed to CreateNewFolderFromName. It achieves remote code execution by overwriting memory with shellcode.
This exploit targets a stack-based buffer overflow in the WinZip FileView ActiveX control (CVE-2006-6884). It generates a malicious HTML page and embeds shellcode within a BMP image to achieve remote code execution when a user visits the page.
This exploit targets a stack-based buffer overflow in the WinZip FileView ActiveX control via an unsafe method exposure. The PoC uses a long string to trigger the overflow when the 'OnAfterItemAdd' event is fired.