NVD

Id
61593  
Name
CVE-2006-2909  
Description
Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-16  
Modified Date
2011-03-07  
Seq
2006-2909  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318627 61593 CVE-2006-2909 1104  View
318628 61593 CVE-2006-2909 1016308  View
318629 61593 CVE-2006-2909 http://www.picozip.com/changelog.html  View
318630 61593 CVE-2006-2909 20060614 Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow  View
318631 61593 CVE-2006-2909 20060616 Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow  View
318632 61593 CVE-2006-2909 18425  View
318633 61593 CVE-2006-2909 ADV-2006-2330  View
318634 61593 CVE-2006-2909 picozip-zipinfo-bo(27096)  View

Related JVN