CVE-2006-4301
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1)…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 39.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 39.05% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- microsoft/ie
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/1439
- http://www.osvdb.org/29524
- http://www.osvdb.org/29525
- http://www.securityfocus.com/archive/1/443907/100/0/threaded
- http://www.securityfocus.com/bid/19640Exploit
- http://xsec.org/index.php?module=releases&act=view&type=1&id=17Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28516
- https://www.exploit-db.com/exploits/4251
- http://securityreason.com/securityalert/1439
- http://www.osvdb.org/29524
- http://www.osvdb.org/29525
- http://www.securityfocus.com/archive/1/443907/100/0/threaded
- http://www.securityfocus.com/bid/19640Exploit
- http://xsec.org/index.php?module=releases&act=view&type=1&id=17Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28516
- https://www.exploit-db.com/exploits/4251
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.