Unrated severityNVD Advisory· Published Feb 28, 2006· Updated Jun 16, 2026
CVE-2006-0926
CVE-2006-0926
Description
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:smithmicro:stuffit_deluxe:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:smithmicro:stuffit_expander:9.0.0.21_engine_9.0.0.21:*:*:*:*:*:*:*
- cpe:2.3:a:smithmicro:stuffit_standard:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:smithmicro:zipmagic_deluxe:9.0:*:*:*:*:*:*:*
- Range: <= 9.0, Deluxe 9.0, Expander 9.0.0.21
Patches
Vulnerability mechanics
References
7News mentions
0No linked articles in our index yet.