CVE-2006-4627
System Information ActiveX Control - Denial of Service via SaveFile Function
Title source: llmDescription
System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/28381
Various Sources x_refsource_misc
http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry
Various Sources x_refsource_misc
http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918
Scores
EPSS
0.1412
EPSS Percentile
96.2%
Details
Status
published
Products (1)
microsoft/system_information_activex_control
Published
Sep 07, 2006
Tracked Since
Feb 18, 2026