Internet Explorer COM Object Instantiation Memory Corruption (CVE-2006-4495)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating an object. ...

CVE-2006-4495

The CVE-2006-4495 issue affects Microsoft Internet Explorer. It arises when IE instantiates certain Windows 2000 ActiveX COM objects not designed as controls (ciodm.dll, myinfo.dll, msdxm.ocx, creator.dll). The root cause is improper COM object instantiation within IE, which can lead to memory co...