CVE-2006-6884: Winzip

High severity, CVSS 9.3. EPSS: 4.7% chance of exploitation in the next 30 days.

Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.

Affected products

• Winzip Winzip: version 10.0_build_6667 only

Published 2006-12-31. Last modified 2026-06-16.