NVD

Id
63331  
Name
CVE-2006-4704  
Description
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-11-01  
Modified Date
2011-03-07  
Seq
2006-4704  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
330033 63331 CVE-2006-4704 http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx  View
330034 63331 CVE-2006-4704 oval:org.mitre.oval:def:288  View
330035 63331 CVE-2006-4704 http://research.eeye.com/html/alerts/zeroday/20061031.html  View
330036 63331 CVE-2006-4704 1017142  View
330037 63331 CVE-2006-4704 VU#854856  View
330038 63331 CVE-2006-4704 927709  View
330039 63331 CVE-2006-4704 MS06-073  View
330040 63331 CVE-2006-4704 20061212 ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability  View
330041 63331 CVE-2006-4704 HPSBST02180  View
330042 63331 CVE-2006-4704 20797  View
330043 63331 CVE-2006-4704 20843  View
330044 63331 CVE-2006-4704 http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf  View
330045 63331 CVE-2006-4704 TA06-346A  View
330046 63331 CVE-2006-4704 ADV-2006-4282  View
330047 63331 CVE-2006-4704 http://www.zerodayinitiative.com/advisories/ZDI-06-047.html  View
330048 63331 CVE-2006-4704 ie-wscriptshell-command-execution(29915)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59815 JVNDB-2006-002081 Microsoft Visual Studio 2005 におけるクロスゾーンスクリプティングの脆弱性 Microsoft Visual Studio 2005 の WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX コントロール (WmiScriptUtils.dll) には、クロスゾーンスクリプティングの脆弱性が存在します。 CVE-2006-4704 20806 CVE-2006-4704 63331 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002081.html 2006-11-01 2012-09-25 View