CVE-2006-4495

Published: Aug 31, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.

Affected (21)

Products: Microsoft: Ie, Windows 2003 Server

Microsoft

2 products

Windows 2003 Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 6.0 sp1

Configuration B

20 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2003 Server	Version 2000_server
Microsoft Windows 2003 Server	Version 2000_server sp1
Microsoft Windows 2003 Server	Version 2000_server sp2
Microsoft Windows 2003 Server	Version 2000_server sp3
Microsoft Windows 2003 Server	Version 2000_server sp4
Microsoft Windows 2003 Server	Version advanced_server
Microsoft Windows 2003 Server	Version advanced_server sp1
Microsoft Windows 2003 Server	Version advanced_server sp2
Microsoft Windows 2003 Server	Version advanced_server sp3
Microsoft Windows 2003 Server	Version advanced_server sp4
Microsoft Windows 2003 Server	Version datacenter_server
Microsoft Windows 2003 Server	Version datacenter_server sp1
Microsoft Windows 2003 Server	Version datacenter_server sp2
Microsoft Windows 2003 Server	Version datacenter_server sp3
Microsoft Windows 2003 Server	Version datacenter_server sp4
Microsoft Windows 2003 Server	Version professional
Microsoft Windows 2003 Server	Version professional sp1
Microsoft Windows 2003 Server	Version professional sp2
Microsoft Windows 2003 Server	Version professional sp3
Microsoft Windows 2003 Server	Version professional sp4