$ cve CVE-2006-4193 JSON

CVE-2006-4193 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 47.5% (pctl 99)

Patch early

A public exploit exists.

Description

Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	47.48% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-08-17
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	ie
microsoft	internet explorer

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer 6 - 'IMSKDIC.dll' Denial of Service	2006-08-15
exploit-db	Microsoft Internet Explorer 6 - 'MSOE.dll' Denial of Service	2006-08-15

References

→ the Explorer · watch your stack · NVD