Exploitation Summary
CVE-2006-4777 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Metasploit, nop, Mario1234, including a Metasploit module exploits/windows/browser/ms06_067_keyframe.
AI-analyzed exploit summary This is a Metasploit module exploiting a heap overflow vulnerability in the KeyFrame method of the DirectAnimation.PathControl ActiveX control (CVE-2006-4777). It uses heap spraying and JavaScript obfuscation to achieve remote code execution on vulnerable Windows systems.
Description
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.
Exploits (4)
This is a Metasploit module exploiting a heap overflow vulnerability in the KeyFrame method of the DirectAnimation.PathControl ActiveX control (CVE-2006-4777). It uses heap spraying and JavaScript obfuscation to achieve remote code execution on vulnerable Windows systems.
This exploit targets a heap overflow vulnerability in Internet Explorer's DirectAnimation.PathControl COM object (CVE-2006-4777). It generates an HTML file with malicious JavaScript that triggers the overflow and executes shellcode to download and run an arbitrary executable from a specified URL.
This repository contains a functional JavaScript exploit for CVE-2006-4777, targeting Internet Explorer 6.0 SP1 on Windows XP SP2. The exploit leverages heap spraying and memory corruption to achieve fileless, drive-by RCE without user consent.
This Metasploit module exploits a heap overflow vulnerability in the KeyFrame method of the DirectAnimation.PathControl ActiveX control (CVE-2006-4777). It uses heap spraying and JavaScript obfuscation to achieve remote code execution on vulnerable Windows systems.