CVE-2006-4704
72Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 43%
da publicação à arma1419 dias
Publicada no NVD1 de nov.
1ª PoC+1419d
metasploit11 de abr.
VulnCheck+69d
probabilidade de exploração
43%top 1% das CVEs
exploração observada
simVulnCheck
1 exploit(s) público(s)
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/16561não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspxhttp://research.eeye.com/html/alerts/zeroday/20061031.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073http://secunia.com/advisories/22603http://securitytracker.com/id?1017142https://exchange.xforce.ibmcloud.com/vulnerabilities/29915https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288http://www.kb.cert.org/vuls/id/854856http://www.microsoft.com/technet/security/advisory/927709.mspxhttp://www.securityfocus.com/archive/1/454201/100/0/threadedhttp://www.securityfocus.com/archive/1/454969/100/200/threadedhttp://www.securityfocus.com/bid/20797