PT-2006-5412 · Microsoft · Internet Explorer

Published 2006-09-07 · Updated 2018-08-13 · CVE-2006-4627

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer (affected versions not specified)

Description The issue concerns the System Information ActiveX control, which can be accessed via Microsoft Internet Explorer. It allows remote attackers to cause a denial of service, resulting in a crash, by exploiting the SaveFile function with a long computer name, and possibly filename and category arguments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-4627

Affected Products

Internet Explorer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-4627 · Security Note
• http://osvdb.org/28381 · Note
• http://blogger.com/comment.g?blogID=30557436&postID=115190809697529918 · Note
• http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry · Note