CVE-2006-4777
82Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 79%
de la publicación al arma0 días
Publicada en NVD14 sept
1ª PoC13 sept
metasploit+61d
VulnCheck+61d
probabilidad de explotación
79%top 1% de las CVE
explotación observada
síVulnCheck
4 exploit(s) público(s)
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.
Productos afectados
n/a · n/aPoCs públicas encontradas — 4
githubgithub.com/Mario1234/js-driveby-download-CVE-2006-4777★ 0exploitdbwww.exploit-db.com/exploits/2358no verificadoexploitdbwww.exploit-db.com/exploits/16506no verificadovulncheckvulncheck.com/xdb/c1465146beb3no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067http://secunia.com/advisories/21910http://securityreason.com/securityalert/1577http://securitytracker.com/id?1016854https://exchange.xforce.ibmcloud.com/vulnerabilities/28942https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103http://www.kb.cert.org/vuls/id/377369http://www.microsoft.com/technet/security/advisory/925444.mspxhttp://www.osvdb.org/28842http://www.securityfocus.com/archive/1/445898/100/0/threadedhttp://www.securityfocus.com/archive/1/446065/100/0/threadedhttp://www.securityfocus.com/archive/1/446084/100/0/threaded