CVE Database
/

CVE-2006-4446

Back to search

CVE-2006-4446

Published: Aug 30, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points.

VendorProductVersions

n/a

n/a

affected
n/a

References

21910
third-party-advisory
x_refsource_SECUNIA
1468
third-party-advisory
x_refsource_SREASON
TA06-318A
third-party-advisory
x_refsource_CERT
ie-daxctle-dos(28608)
vdb-entry
x_refsource_XF
28841
vdb-entry
x_refsource_OSVDB
oval:org.mitre.oval:def:437
vdb-entry
signature
x_refsource_OVAL
MS06-067
vendor-advisory
x_refsource_MS
1016764
vdb-entry
x_refsource_SECTRACK
19738
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now