← Database

CVE-2006-2909

HIGH CVSS: 7.5 Published: 2006-06-16 Modified: 2026-06-16

Description

Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive.

Affected Platforms

Picozip Picozip

Weakness Type

NVD-CWE-Other

References