CVE-2006-4219

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-18 · updated 2026-06-16

Description

The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN.

Affected products

Microsoft Ie: 6.0-sp1

References

http://securityreason.com/securityalert/1403
http://www.securityfocus.com/archive/1/443493/100/0/threaded
http://www.securityfocus.com/bid/19570
http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=14
https://exchange.xforce.ibmcloud.com/vulnerabilities/28444
http://securityreason.com/securityalert/1403
http://www.securityfocus.com/archive/1/443493/100/0/threaded
http://www.securityfocus.com/bid/19570
http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=14
https://exchange.xforce.ibmcloud.com/vulnerabilities/28444

Get alerted when CVE-2006-4219 or the next vulnerability affects your stack