PT-2006-5012 · Microsoft · Ime+2

Nop · Publicado 2006-08-17 · Atualizado 2021-07-23 · CVE-2006-4193

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 6.0 SP1

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls. This includes instantiating certain DLL files, such as imskdic.dll (Microsoft IME), chtskdic.dll (Microsoft IME), and msoe.dll (Outlook), which leads to memory corruption.

Recommendations For Microsoft Internet Explorer version 6.0 SP1, consider restricting the instantiation of COM objects as ActiveX controls to minimize the risk of exploitation. As a temporary workaround, avoid using the affected DLL files, including imskdic.dll, chtskdic.dll, and msoe.dll, until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-4193

Produtos afetados

Internet Explorer

Ime

Outlook

Referências · 19

• 🔥 http://securityfocus.com/bid/19521 · Exploit
• 🔥 http://xsec.org/index.php?module=releases&act=view&type=1&id=10 · Exploit
• 🔥 http://securityfocus.com/bid/19529 · Exploit
• 🔥 http://xsec.org/index.php?module=releases&act=view&type=1&id=8 · Exploit
• 🔥 http://xsec.org/index.php?module=releases&act=view&type=1&id=9 · Exploit
• 🔥 https://exploit-db.com/exploits/28389 · Exploit
• 🔥 https://exploit-db.com/exploits/28387 · Exploit
• 🔥 http://securityfocus.com/bid/19530 · Exploit
• http://osvdb.org/29347 · Nota
• http://securityfocus.com/archive/1/443290/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28436 · Nota
• http://securityreason.com/securityalert/1402 · Nota
• http://osvdb.org/29345 · Nota
• http://osvdb.org/29346 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4193 · Nota de Segurança