CVE-2006-4301

Microsoft IE - Improper Input Validation

Title source: rule

Description

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.

Exploits (2)

exploitdb WORKING POC VERIFIED
by DeltahackingTEAM · htmldoswindows
https://www.exploit-db.com/exploits/4251
exploitdb WORKING POC VERIFIED
by XSec · htmldoswindows
https://www.exploit-db.com/exploits/28421

Scores

EPSS 0.3938
EPSS Percentile 97.3%

Details

CWE
CWE-20
Status published
Products (1)
microsoft/ie 6.0 sp1
Published Aug 23, 2006
Tracked Since Feb 18, 2026