CVEvulnerability
CVE-2006-4494
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll.
Affected configurations
• microsoft visual studio 6.0
References
- http://securityreason.com/securityalert/1473 securityreason.com
- http://www.securityfocus.com/archive/1/443499/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19572 www.securityfocus.com
- http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15 Exploit, Vendor Advisory
- http://securityreason.com/securityalert/1473 securityreason.com
- http://www.securityfocus.com/archive/1/443499/100/100/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19572 www.securityfocus.com
- http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15 Exploit, Vendor Advisory