CVE-2006-4495

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-31 · updated 2026-06-16

Description

Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.

Affected products

Microsoft Ie: 6.0-sp1
Microsoft Windows 2003 Server: 2000_server, 2000_server-sp1, 2000_server-sp2, 2000_server-sp3, 2000_server-sp4, advanced_server (+14)

References

http://securityreason.com/securityalert/1474
http://www.securityfocus.com/archive/1/443896/100/100/threaded
http://www.securityfocus.com/bid/19636
http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16
https://exchange.xforce.ibmcloud.com/vulnerabilities/28512
http://securityreason.com/securityalert/1474
http://www.securityfocus.com/archive/1/443896/100/100/threaded
http://www.securityfocus.com/bid/19636
http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16
https://exchange.xforce.ibmcloud.com/vulnerabilities/28512

Get alerted when CVE-2006-4495 or the next vulnerability affects your stack