PT-2006-5412 · Microsoft · Internet Explorer

Publicado 2006-09-07 · Atualizado 2018-08-13 · CVE-2006-4627

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer (affected versions not specified)

Description The issue concerns the System Information ActiveX control, which can be accessed via Microsoft Internet Explorer. It allows remote attackers to cause a denial of service, resulting in a crash, by exploiting the SaveFile function with a long computer name, and possibly filename and category arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-4627

Produtos afetados

Internet Explorer

Referências · 4

• http://osvdb.org/28381 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4627 · Nota de Segurança
• http://blogger.com/comment.g?blogID=30557436&postID=115190809697529918 · Nota
• http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry · Nota