CVE-2006-4627

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-07 · updated 2026-06-16

Description

System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.

Affected products

Microsoft System Information Activex Control: all versions

References

http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry
http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918
http://www.osvdb.org/28381
http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry
http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918
http://www.osvdb.org/28381

Get alerted when CVE-2006-4627 or the next vulnerability affects your stack