CVE-2006-2909

Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename…

published June 16, 2006

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09033 · 95.2th percentile
Published
2006-06-16T10:00Z
EPSS history
Timeline
  • 16 JUN 10:00Z
    Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename…
    cvelistv5