CVE-2006-4697

Published: Feb 13, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193.

Affected (4)

Products: Microsoft: Internet Explorer, Ie

Microsoft

2 products

Internet Explorer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 5.01 sp4

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microsoft Ie	Version 6.0 sp1

Running on/with	Platform Versions
Microsoft Windows 2000	All versions

Configuration C

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6.0

Running on/with	Platform Versions
Microsoft Windows 2003 Server	Version gold
Microsoft Windows 2003 Server	Version gold
Microsoft Windows Xp	All versions

Configuration D

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 7.0

Running on/with	Platform Versions
Microsoft Windows 2003 Server	Version gold
Microsoft Windows 2003 Server	Version sp1
Microsoft Windows 2003 Server	Version sp1
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions