CVE-2006-4704
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 43%
from disclosure to weapon1419 days
Published on NVDNov 1
1st PoC+1419d
metasploitApr 11
VulnCheck+69d
exploitation probability
43%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16561unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspxhttp://research.eeye.com/html/alerts/zeroday/20061031.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073http://secunia.com/advisories/22603http://securitytracker.com/id?1017142https://exchange.xforce.ibmcloud.com/vulnerabilities/29915https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288http://www.kb.cert.org/vuls/id/854856http://www.microsoft.com/technet/security/advisory/927709.mspxhttp://www.securityfocus.com/archive/1/454201/100/0/threadedhttp://www.securityfocus.com/archive/1/454969/100/200/threadedhttp://www.securityfocus.com/bid/20797