$ cve CVE-2006-4301 JSON

CVE-2006-4301 EXPLOIT

5.0

MEDIUM · CVSS 2.0 · EPSS 39.1% (pctl 99)

Patch early

A public exploit exists.

Description

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.

Scoring

CVSS	5.0 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS	39.05% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-20
On CISA KEV	no
Public exploit	yes
Published	2006-08-23
Last modified	2026-06-16

Affected (1)

Vendor	Product
microsoft	ie

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer 6 - DirectX Media Remote Overflow Denial of Service	2007-07-31
exploit-db	Microsoft Internet Explorer 6 - Multiple COM Object Color Property Denial of Service Vulnerabilities	2006-08-21

References

→ the Explorer · watch your stack · NVD