NVD

Id
60016  
Name
CVE-2006-1303  
Description
Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-13  
Modified Date
2011-04-15  
Seq
2006-1303  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308873 60016 CVE-2006-1303 oval:org.mitre.oval:def:1135  View
308874 60016 CVE-2006-1303 oval:org.mitre.oval:def:1767  View
308875 60016 CVE-2006-1303 oval:org.mitre.oval:def:1830  View
308876 60016 CVE-2006-1303 oval:org.mitre.oval:def:1928  View
308877 60016 CVE-2006-1303 oval:org.mitre.oval:def:1973  View
308878 60016 CVE-2006-1303 oval:org.mitre.oval:def:2017  View
308879 60016 CVE-2006-1303 1016291  View
308880 60016 CVE-2006-1303 VU#959049  View
308881 60016 CVE-2006-1303 MS06-021  View
308882 60016 CVE-2006-1303 20060613 ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability  View
308883 60016 CVE-2006-1303 18328  View
308884 60016 CVE-2006-1303 ADV-2006-2319  View
308885 60016 CVE-2006-1303 http://www.zerodayinitiative.com/advisories/ZDI-06-018.html  View
308886 60016 CVE-2006-1303 ie-wmm2fxadll-execute-code(26774)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58137 JVNDB-2006-000333 Microsoft Internet Explorer の Wmm2fxa.dll における任意のコードを実行される脆弱性 Microsoft Internet Explorer (IE) にはインスタンス化が意図されていない COM オブジェクトをインスタンス化する際に、メモリ領域が破壊される脆弱性が存在します。 CVE-2006-1303 17405 CVE-2006-1303 60016 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000333.html 2006-06-13 2007-04-01 View