$ cve CVE-2006-4868 JSON

CVE-2006-4868 EXPLOIT

9.3

HIGH · CVSS 2.0 · EPSS 61.4% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.

Scoring

CVSS	9.3 (HIGH, v2.0)
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS	61.44% — more likely to be exploited than 99% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2006-09-19
Last modified	2026-06-16

Affected (5)

Vendor	Product
microsoft	internet explorer
microsoft	outlook
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer - 'VML' Fill Method Code Execution (MS06-055) (Metasploit)	2010-07-03
exploit-db	Microsoft Internet Explorer - 'VML' Remote Buffer Overflow (SP2)	2006-09-25
exploit-db	Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow	2006-09-24

References

→ the Explorer · watch your stack · NVD