CVE-2006-4495 – Microsoft Windows Server 2000 - Multiple COM Object Instantiation Code Execution Vulnerabilities

https://notcve.org/view.php?id=CVE-2006-4495

Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll. Microsoft Internet Explorer permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) y posiblemente ejecutar código de su elección instanciando ciertos objetos Windows 2000 ActiveX COM incluyendo (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, y (4) creator.dll. • https://www.exploit-db.com/exploits/28420 http://securityreason.com/securityalert/1474 http://www.securityfocus.com/archive/1/443896/100/100/threaded http://www.securityfocus.com/bid/19636 http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16 https://exchange.xforce.ibmcloud.com/vulnerabilities/28512 •