CVE-2006-4704

MEDIUM 6.8CVE-2006-4704 · Published 01/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
visual studio .net microsoft	`= 2005`	No fix yet

Description

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."

References

blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx
research.eeye.com/html/alerts/zeroday/20061031.html
secunia.com/advisories/22603 · Vendor Advisory
securitytracker.com/id
kb.cert.org/vuls/id/854856 · US Government Resource
microsoft.com/technet/security/advisory/927709.mspx · Vendor Advisory
securityfocus.com/archive/1/454201/100/0/threaded
securityfocus.com/archive/1/454969/100/200/threaded
securityfocus.com/bid/20797
securityfocus.com/bid/20843 · Exploit
securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
us-cert.gov/cas/techalerts/TA06-346A.html · US Government Resource
vupen.com/english/advisories/2006/4282 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-06-047.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073
exchange.xforce.ibmcloud.com/vulnerabilities/29915
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free