CVE-2006-4301

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

39.05% chance of exploitation in the next 30 days, 99th percentile

Published

2006-08-23

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/28421
• https://www.exploit-db.com/exploits/4251

Security advisories

• http://xsec.org/index.php?module=releases&act=view&type=1&id=17
• http://www.securityfocus.com/bid/19640

References

• CVE Record
• NVD entry