EIP-2026-116567

This exploit triggers an access violation in WinZip's WZFLDVW.OCX by setting the IconIndex property to an invalid value (-1), causing a crash due to a NULL pointer dereference. The PoC is written in VBScript and embedded in an XML file, targeting a specific version of WinZip on Windows XP SP2.