Back to search
CVE-2006-4193
Published: Aug 17, 2006
Modified: Aug 7, 2024
PUBLISHED
Description
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
ie-msoe-dos(28439)
vdb-entry
x_refsource_XF
29347
vdb-entry
x_refsource_OSVDB
29345
vdb-entry
x_refsource_OSVDB
20060815 [XSec-06-03]: Internet Explorer (CHTSKDIC.DLL) COM Object Instantiation Vulnerability
mailing-list
x_refsource_BUGTRAQ
1402
third-party-advisory
x_refsource_SREASON
19530
vdb-entry
x_refsource_BID
20060815 [XSec-06-02]: Internet Explorer (IMSKDIC.DLL) COM Object Instantiation Vulnerability
mailing-list
x_refsource_BUGTRAQ
19521
vdb-entry
x_refsource_BID
ie-imskdic-dos(28436)
vdb-entry
x_refsource_XF
19529
vdb-entry
x_refsource_BID
29346
vdb-entry
x_refsource_OSVDB
20060815 [XSec-06-04]: Internet Explorer (msoe.dll) COM Object Instantiation Vulnerability
mailing-list
x_refsource_BUGTRAQ
ie-chtskdic-dos(28438)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now