CVE-2006-4495

EPSS 20.71%
Veröffentlicht 31.08.2006 22:04:00
Zuletzt bearbeitet 16.06.2026 22:29:13
Erkennungen
Login

Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 21 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Ie Version 6.0 Update sp1

Microsoft ≫ Windows 2003 Server Version 2000_server

Microsoft ≫ Windows 2003 Server Version 2000_server Update sp1

Microsoft ≫ Windows 2003 Server Version 2000_server Update sp2

Microsoft ≫ Windows 2003 Server Version 2000_server Update sp3

Microsoft ≫ Windows 2003 Server Version 2000_server Update sp4

Microsoft ≫ Windows 2003 Server Version advanced_server

Microsoft ≫ Windows 2003 Server Version advanced_server Update sp1

Microsoft ≫ Windows 2003 Server Version advanced_server Update sp2

Microsoft ≫ Windows 2003 Server Version advanced_server Update sp3

Microsoft ≫ Windows 2003 Server Version advanced_server Update sp4

Microsoft ≫ Windows 2003 Server Version datacenter_server

Microsoft ≫ Windows 2003 Server Version datacenter_server Update sp1

Microsoft ≫ Windows 2003 Server Version datacenter_server Update sp2

Microsoft ≫ Windows 2003 Server Version datacenter_server Update sp3

Microsoft ≫ Windows 2003 Server Version datacenter_server Update sp4

Microsoft ≫ Windows 2003 Server Version professional

Microsoft ≫ Windows 2003 Server Version professional Update sp1

Microsoft ≫ Windows 2003 Server Version professional Update sp2

Microsoft ≫ Windows 2003 Server Version professional Update sp3

Microsoft ≫ Windows 2003 Server Version professional Update sp4

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	20.71%	0.973

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://securityreason.com/securityalert/1474

http://www.securityfocus.com/archive/1/443896/100/100/threaded

http://www.securityfocus.com/bid/19636

http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16

https://exchange.xforce.ibmcloud.com/vulnerabilities/28512

https://nvd.nist.gov/vuln/detail/CVE-2006-4495

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4495

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4495

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2006-4495