PT-2006-5482 · Microsoft · Wmi Object Broker Activex Control+2

H D Moore + 1 · Published 2006-11-01 · Updated 2018-10-17 · CVE-2006-4704

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio 2005

Description A cross-zone scripting issue exists in the WMI Object Broker ActiveX control, allowing remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects.

Recommendations For Microsoft Visual Studio 2005, consider disabling the WMI Object Broker ActiveX control until a patch is available. Restrict access to the WmiScriptUtils.dll to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-4704

Affected Products

Visual Studio

Wmi Object Broker Activex Control

Wmiscriptutils.Dll

References · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_createobject.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16561 · Exploit
• 🔥 http://securityfocus.com/bid/20843 · Exploit
• http://secunia.com/advisories/22603 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4282 · Vendor Advisory
• http://microsoft.com/technet/security/advisory/927709.mspx · Vendor Advisory
• http://securityfocus.com/archive/1/454969/100/200/threaded · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4704 · Security Note
• http://kb.cert.org/vuls/id/854856 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29915 · Note
• http://research.eeye.com/html/alerts/zeroday/20061031.html · Note
• http://us-cert.gov/cas/techalerts/TA06-346A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288 · Note
• http://zerodayinitiative.com/advisories/ZDI-06-047.html · Note