Is CVE-2006-3890 being actively exploited?

CVE-2006-3890 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2006-3890?

CVE-2006-3890 has a CVSS 2.0 base score of 9.3 (HIGH).

CVE-2006-3890

HIGH · CVSS 9.3EPSS 14.6%EU EUVD

Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applications, allows remote attackers to execute arbitrary code via a long FilePattern attribute in a WZFILEVIEW object, a different vulnerability than CVE-2006-5198.

Key facts

CVSS score: 9.3 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS score: 14.6% (97th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2006-3884)
Published: November 21, 2006
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2006-3884 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

sky software / fileview activex control
winzip / winzip
winzip / winzip
winzip / winzip
winzip / winzip
winzip / winzip
winzip / winzip

References

http://secunia.com/advisories/22891(Exploit, Patch, Vendor Advisory)
http://www.kb.cert.org/vuls/id/225217(Patch, US Government Resource)
http://www.securityfocus.com/archive/1/451566/100/0/threaded
http://www.securityfocus.com/bid/21060(Exploit, Patch)
http://www.securityfocus.com/bid/21108
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
https://www.exploit-db.com/exploits/2785

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain