CVE-2006-4446
- State
- Published
- Severity
- Not scored
- Published
- Aug 30, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 29, 2006
Description
Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 21910third-party-advisory
- 1468third-party-advisory
- TA06-318Athird-party-advisory
- 20060827 [XSec-06-10]: Internet Explorer (daxctle.ocx) Heap Overflow Vulnerabilitymailing-list
- ie-daxctle-dos(28608)vdb-entry
- 28841vdb-entry
- http://www.xsec.org/index.php?module=releases&act=view&type=1&id=19
- oval:org.mitre.oval:def:437vdb-entrysignature
- MS06-067vendor-advisory
- 1016764vdb-entry
- 19738vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.