CVE-2006-0926: Smithmicro Stuffit Deluxe

Low severity, CVSS 2.6. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.

Affected products

• Smithmicro Stuffit Deluxe: version 9.0 only
• Smithmicro Stuffit Expander: version 9.0.0.21_engine_9.0.0.21 only
• Smithmicro Stuffit Standard: version 9.0 only
• Smithmicro Zipmagic Deluxe: version 9.0 only

Published 2006-02-28. Last modified 2026-06-16.