Lucene search
HistoryAug 31, 2006 - 10:04 p.m.
CVE-2006-4495
microsoft
internet explorer
cve-2006-4495
denial of service
memory corruption
arbitrary code
activex
com objects
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.96 High
EPSS
Percentile
99.5%
Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.
Affected configurations
Node
microsoftieMatch6.0sp1
Node
microsoftwindows_2003_serverMatch2000_server
ORmicrosoftwindows_2003_serverMatch2000_serversp1
ORmicrosoftwindows_2003_serverMatch2000_serversp2
ORmicrosoftwindows_2003_serverMatch2000_serversp3
ORmicrosoftwindows_2003_serverMatch2000_serversp4
ORmicrosoftwindows_2003_serverMatchadvanced_server
ORmicrosoftwindows_2003_serverMatchadvanced_serversp1
ORmicrosoftwindows_2003_serverMatchadvanced_serversp2
ORmicrosoftwindows_2003_serverMatchadvanced_serversp3
ORmicrosoftwindows_2003_serverMatchadvanced_serversp4
ORmicrosoftwindows_2003_serverMatchdatacenter_server
ORmicrosoftwindows_2003_serverMatchdatacenter_serversp1
ORmicrosoftwindows_2003_serverMatchdatacenter_serversp2
ORmicrosoftwindows_2003_serverMatchdatacenter_serversp3
ORmicrosoftwindows_2003_serverMatchdatacenter_serversp4
ORmicrosoftwindows_2003_serverMatchprofessional
ORmicrosoftwindows_2003_serverMatchprofessionalsp1
ORmicrosoftwindows_2003_serverMatchprofessionalsp2
ORmicrosoftwindows_2003_serverMatchprofessionalsp3
ORmicrosoftwindows_2003_serverMatchprofessionalsp4
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:ie | microsoft ie | eq | 6.0 |
Related
nvd
nvd
CVE-2006-4495
2006-08-31 22:04:00
checkpoint_advisories
checkpoint_advisories
Internet Explorer COM Object Instantiation Memory Corruption (CVE-2006-4495)
2009-12-13 00:00:00
cvelist
cvelist
CVE-2006-4495
2006-08-31 22:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.96 High
EPSS
Percentile
99.5%
Related for CVE-2006-4495