PT-2006-5012 · Microsoft · Ime+2

Nop · Published 2006-08-17 · Updated 2021-07-23 · CVE-2006-4193

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 6.0 SP1

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls. This includes instantiating certain DLL files, such as imskdic.dll (Microsoft IME), chtskdic.dll (Microsoft IME), and msoe.dll (Outlook), which leads to memory corruption.

Recommendations For Microsoft Internet Explorer version 6.0 SP1, consider restricting the instantiation of COM objects as ActiveX controls to minimize the risk of exploitation. As a temporary workaround, avoid using the affected DLL files, including imskdic.dll, chtskdic.dll, and msoe.dll, until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-4193

Affected Products

Internet Explorer

Ime

Outlook

References · 19

• 🔥 http://securityfocus.com/bid/19521 · Exploit
• 🔥 http://xsec.org/index.php?module=releases&act=view&type=1&id=10 · Exploit
• 🔥 http://securityfocus.com/bid/19529 · Exploit
• 🔥 http://xsec.org/index.php?module=releases&act=view&type=1&id=8 · Exploit
• 🔥 http://xsec.org/index.php?module=releases&act=view&type=1&id=9 · Exploit
• 🔥 https://exploit-db.com/exploits/28389 · Exploit
• 🔥 https://exploit-db.com/exploits/28387 · Exploit
• 🔥 http://securityfocus.com/bid/19530 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4193 · Security Note
• http://osvdb.org/29347 · Note
• http://securityfocus.com/archive/1/443290/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28436 · Note
• http://securityreason.com/securityalert/1402 · Note
• http://osvdb.org/29345 · Note
• http://osvdb.org/29346 · Note