PT-2006-3344 · Microsoft · Dximagetransform.Microsoft.Light Activex Control+1
Dan Plakosh
+1
·
Publicado
2006-06-13
·
Atualizado
2021-07-23
·
CVE-2006-2383
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 5.01 SP4 and 6 SP1 and earlier
Description
The issue allows remote attackers to execute arbitrary code via unexpected data related to parameter validation in the DXImageTransform.Microsoft.Light ActiveX control. This can cause Internet Explorer to crash in a way that enables code execution. An attacker could exploit the vulnerability by constructing a specially crafted Web page, potentially allowing remote code execution if a user visits the specially crafted Web site. A successful exploitation could allow an attacker to take complete control of an affected system.
Recommendations
For Microsoft Internet Explorer versions 5.01 SP4 and 6 SP1 and earlier, consider disabling the DXImageTransform.Microsoft.Light ActiveX control as a temporary workaround until a patch is available. Restrict access to Web pages that could potentially exploit this vulnerability to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Dximagetransform.Microsoft.Light Activex Control
Internet Explorer