CVE-2006-4301
Microsoft IE - Improper Input Validation
Title source: ruleDescription
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by DeltahackingTEAM · htmldoswindows
https://www.exploit-db.com/exploits/4251
References (8)
Scores
EPSS
0.3938
EPSS Percentile
97.3%
Details
CWE
CWE-20
Status
published
Products (1)
microsoft/ie
6.0 sp1
Published
Aug 23, 2006
Tracked Since
Feb 18, 2026