CVE-2006-4301
Microsoft Internet Explorer 6.0 SP1 - DoS via Long Color Attribute in DirectX Media Image Transforms
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-4301. PoCs published by DeltahackingTEAM, XSec.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in dxtmsft.dll (DirectX Media) via Internet Explorer 6.0. It uses a VBScript to trigger the overflow by passing an excessively long string to the Chroma.Color property, potentially leading to remote code execution.
Description
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.
Exploits (2)
This exploit targets a buffer overflow vulnerability in dxtmsft.dll (DirectX Media) via Internet Explorer 6.0. It uses a VBScript to trigger the overflow by passing an excessively long string to the Chroma.Color property, potentially leading to remote code execution.
This exploit targets a denial-of-service vulnerability in Microsoft Internet Explorer by instantiating specific COM objects and attempting to set their 'Color' property with an excessively large string. The PoC demonstrates the crash potential but does not confirm remote code execution.