CVE-2006-4704

EXPLOITED

Microsoft Visual Studio 2005 - XSS

Title source: llm

Description

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16561

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by hdm · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ie_createobject.rb

View Code ZIP pw:eip

References (17)

[Various Sources] http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx

[Vendor Advisory] http://secunia.com/advisories/22603

[US Government Resource] http://www.kb.cert.org/vuls/id/854856

[Vendor Advisory] http://www.microsoft.com/technet/security/advisory/927709.mspx

[Exploit] http://www.securityfocus.com/bid/20843

[US Government Resource] http://www.us-cert.gov/cas/techalerts/TA06-346A.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2006/4282

[Third Party Advisory] http://www.zerodayinitiative.com/advisories/ZDI-06-047.html

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/29915

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288

[Various Sources] http://research.eeye.com/html/alerts/zeroday/20061031.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/454201/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/454969/100/200/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/20797

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1017142

Scores

EPSS 0.7213

EPSS Percentile 98.8%

Details

VulnCheck KEV 2007-01-09

Status published

Products (1)

microsoft/visual_studio_.net 2005

Published Nov 01, 2006

Tracked Since Feb 18, 2026