CVE-2006-4777

HIGH 7.6CVE-2006-4777 · Published 14/09/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
ie microsoft	`= 6.0`	No fix yet

Description

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.

References

secunia.com/advisories/21910 · Vendor Advisory
securityreason.com/securityalert/1577
securitytracker.com/id
kb.cert.org/vuls/id/377369 · US Government Resource
microsoft.com/technet/security/advisory/925444.mspx
osvdb.org/28842
securityfocus.com/archive/1/445898/100/0/threaded
securityfocus.com/archive/1/446065/100/0/threaded
securityfocus.com/archive/1/446084/100/0/threaded
securityfocus.com/archive/1/446085/100/0/threaded
securityfocus.com/archive/1/446246/100/0/threaded
securityfocus.com/bid/20047
us-cert.gov/cas/techalerts/TA06-318A.html · US Government Resource
vupen.com/english/advisories/2006/3593 · Vendor Advisory
xsec.org/index.php
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
exchange.xforce.ibmcloud.com/vulnerabilities/28942
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free