Unrated severityNVD Advisory· Published Jun 16, 2006· Updated Jun 16, 2026

CVE-2006-2909

Description

Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Picozip/Picozip2 versions
cpe:2.3:a:picozip:picozip:4.01:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:picozip:picozip:4.01:*:*:*:*:*:*:*
- (no CPE)range: =4.01

Patches

Vulnerability mechanics

References

secunia.com/advisories/20481nvdPatchVendor Advisory
secunia.com/secunia_research/2006-42/advisory/nvdPatchVendor Advisory
www.securityfocus.com/bid/18425nvdPatch
securityreason.com/securityalert/1104nvd
securitytracker.com/idnvd
www.osvdb.org/26447nvd
www.picozip.com/changelog.htmlnvd
www.securityfocus.com/archive/1/437103/100/0/threadednvd
www.securityfocus.com/archive/1/437450/100/100/threadednvd
www.vupen.com/english/advisories/2006/2330nvd
exchange.xforce.ibmcloud.com/vulnerabilities/27096nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000