CVE-2006-2383

Summary (CVE-2006-2383) : A remote code execution vulnerability in the DXImageTransform.Microsoft.Light ActiveX control (and related components) allows code execution when a user visits a crafted web page. Affected: Internet Explorer 5.01 SP4, IE 6 SP1, and earlier versions. Root cause: improper ...

Microsoft DXImageTransform Light filter fails to validate input

Overview The Microsoft DXImageTransform Light COM object fails to validate input, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description Microsoft COMMicrosoft COM is a technology that allows programmers to create reusable software components that can be...