PT-2006-5247 · Microsoft · Internet Explorer+1

Nop · Published 2006-08-29 · Updated 2018-10-17 · CVE-2006-4446

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 6.0 SP1

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points. Remote code execution is possible if the ActiveX controls are passed unexpected data, which could be achieved by constructing a specially crafted Web page. If successfully exploited, an attacker could take complete control of an affected system.

Recommendations For Microsoft Internet Explorer 6.0 SP1, consider disabling the use of DirectAnimation ActiveX controls until a patch is available. Restrict access to specially crafted Web pages to minimize the risk of exploitation. Avoid using the Spline function with a large number of points in the daxctle.ocx COM object until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-4446

Affected Products

Directanimation

Internet Explorer

References · 17

• 🔥 https://exploit-db.com/exploits/28438 · Exploit
• 🔥 http://securityfocus.com/bid/19738 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4446 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-4446 · Security Note
• http://osvdb.org/28841 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A437 · Note
• http://securityreason.com/securityalert/1468 · Note
• http://xforce.iss.net/xforce/xfdb/28608 · Note
• http://us-cert.gov/cas/techalerts/TA06-318A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28608 · Note
• http://securityfocus.com/archive/1/444504/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/444504/100/0/threaded · Note
• http://xsec.org/index.php?module=releases&act=view&type=1&id=19 · Note
• http://secunia.com/advisories/21910 · Note