CVE-2006-4193
35Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 47%
de la publicación al arma0 días
Publicada en NVD17 ago
1ª PoC15 ago
probabilidad de explotación
47%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files.
Productos afectados
n/a · n/aPoCs públicas encontradas — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28387exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/28389⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://securityreason.com/securityalert/1402https://exchange.xforce.ibmcloud.com/vulnerabilities/28436https://exchange.xforce.ibmcloud.com/vulnerabilities/28438https://exchange.xforce.ibmcloud.com/vulnerabilities/28439http://www.osvdb.org/29345http://www.osvdb.org/29346http://www.osvdb.org/29347http://www.securityfocus.com/archive/1/443290/100/0/threadedhttp://www.securityfocus.com/archive/1/443295/100/0/threadedhttp://www.securityfocus.com/archive/1/443299/100/0/threadedhttp://www.securityfocus.com/bid/19521http://www.securityfocus.com/bid/19529