CVE-2006-0926
smithmicro: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- smithmicro:stuffit_deluxe
- smithmicro:stuffit_expander
- smithmicro:stuffit_standard
- smithmicro:zipmagic_deluxe