CVE-2006-4301

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 39.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-23 · updated 2026-06-16
Weakness: CWE-20

Description

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.

Affected products

Microsoft Ie: 6.0-sp1

References

http://securityreason.com/securityalert/1439
http://www.osvdb.org/29524
http://www.osvdb.org/29525
http://www.securityfocus.com/archive/1/443907/100/0/threaded
http://www.securityfocus.com/bid/19640
http://xsec.org/index.php?module=releases&act=view&type=1&id=17
https://exchange.xforce.ibmcloud.com/vulnerabilities/28516
https://www.exploit-db.com/exploits/4251
http://securityreason.com/securityalert/1439
http://www.osvdb.org/29524
http://www.osvdb.org/29525
http://www.securityfocus.com/archive/1/443907/100/0/threaded

Get alerted when CVE-2006-4301 or the next vulnerability affects your stack