CVE-2006-4301

CVE Database · CVE-2006-4301

CVE-2006-4301

· N/AModified

CVSS v3.1

N/A

EPSS

38.96%

Published

Aug 22, 2006

Modified

Apr 15, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMicrosoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service Exploit-DBMicrosoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.

Weaknesses (CWE)

CWE-20

Affected Products (1)

microsoft · ievulnerable

References (16)

http://securityreason.com/securityalert/1439

http://www.osvdb.org/29524

http://www.osvdb.org/29525

http://www.securityfocus.com/archive/1/443907/100/0/threaded

http://www.securityfocus.com/bid/19640

Exploit

http://xsec.org/index.php?module=releases&act=view&type=1&id=17