PT-2006-5036 · Microsoft · Internet Explorer 6.0+1

Nop · Publicado 2006-08-18 · Atualizado 2018-10-17 · CVE-2006-4219

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows 2003 EE SP1 CN Internet Explorer 6.0 SP1

Description The issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating the Terminal Services COM object (tsuserex.dll) as an ActiveX object in Internet Explorer.

Recommendations For Microsoft Windows 2003 EE SP1 CN, update the system to prevent exploitation. For Internet Explorer 6.0 SP1, avoid instantiating the Terminal Services COM object (tsuserex.dll) as an ActiveX object until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-4219

Produtos afetados

Internet Explorer 6.0

Windows 2003

Referências · 7

• 🔥 http://securityfocus.com/bid/19570 · Exploit
• 🔥 https://exploit-db.com/exploits/28400 · Exploit
• 🔥 http://xsec.org/index.php?module=Releases&act=view&type=1&id=14 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4219 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28444 · Nota
• http://securityfocus.com/archive/1/443493/100/0/threaded · Nota
• http://securityreason.com/securityalert/1403 · Nota