CVEvulnerability
CVE-2006-4777
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.
Affected configurations
• microsoft ie 6.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/21910 Vendor Advisory
- http://securityreason.com/securityalert/1577 securityreason.com
- http://securitytracker.com/id?1016854 securitytracker.com
- http://www.kb.cert.org/vuls/id/377369 US Government Resource
- http://www.microsoft.com/technet/security/advisory/925444.mspx www.microsoft.com
- http://www.osvdb.org/28842 www.osvdb.org
- http://www.securityfocus.com/archive/1/445898/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446065/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446084/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446085/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446246/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20047 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/3593 Vendor Advisory
- http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20 www.xsec.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28942 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103 oval.cisecurity.org
- http://secunia.com/advisories/21910 Vendor Advisory
- http://securityreason.com/securityalert/1577 securityreason.com
- http://securitytracker.com/id?1016854 securitytracker.com
- http://www.kb.cert.org/vuls/id/377369 US Government Resource
- http://www.microsoft.com/technet/security/advisory/925444.mspx www.microsoft.com
- http://www.osvdb.org/28842 www.osvdb.org
- http://www.securityfocus.com/archive/1/445898/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446065/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446084/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446085/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/446246/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20047 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/3593 Vendor Advisory
- http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20 www.xsec.org
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28942 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103 oval.cisecurity.org