Vulnerability Details CVE-2006-4301
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.389
EPSS Ranking 97.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://securityreason.com/securityalert/1439
- http://www.osvdb.org/29524
- http://www.osvdb.org/29525
- http://www.securityfocus.com/archive/1/443907/100/0/threaded
- http://www.securityfocus.com/bid/19640
- http://xsec.org/index.php?module=releases&act=view&type=1&id=17
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28516
- https://www.exploit-db.com/exploits/4251
- http://securityreason.com/securityalert/1439
- http://www.osvdb.org/29524
- http://www.osvdb.org/29525
- http://www.securityfocus.com/archive/1/443907/100/0/threaded
- http://www.securityfocus.com/bid/19640
- http://xsec.org/index.php?module=releases&act=view&type=1&id=17
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28516
- https://www.exploit-db.com/exploits/4251