CVEvulnerability
CVE-2006-4704
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
Affected configurations
• microsoft visual studio .net 2005
References
- http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx blogs.technet.com
- http://research.eeye.com/html/alerts/zeroday/20061031.html research.eeye.com
- http://secunia.com/advisories/22603 Vendor Advisory
- http://securitytracker.com/id?1017142 securitytracker.com
- http://www.kb.cert.org/vuls/id/854856 US Government Resource
- http://www.microsoft.com/technet/security/advisory/927709.mspx Vendor Advisory
- http://www.securityfocus.com/archive/1/454201/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/454969/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20797 www.securityfocus.com
- http://www.securityfocus.com/bid/20843 Exploit
- http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-346A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4282 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-047.html www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29915 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288 oval.cisecurity.org
- http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx blogs.technet.com
- http://research.eeye.com/html/alerts/zeroday/20061031.html research.eeye.com
- http://secunia.com/advisories/22603 Vendor Advisory
- http://securitytracker.com/id?1017142 securitytracker.com
- http://www.kb.cert.org/vuls/id/854856 US Government Resource
- http://www.microsoft.com/technet/security/advisory/927709.mspx Vendor Advisory
- http://www.securityfocus.com/archive/1/454201/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/454969/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20797 www.securityfocus.com
- http://www.securityfocus.com/bid/20843 Exploit
- http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-346A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4282 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-047.html www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29915 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288 oval.cisecurity.org