CVE-2006-4777

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 79.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-14 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.

Affected products

Microsoft Ie: 6.0-sp1

References

http://secunia.com/advisories/21910
http://securityreason.com/securityalert/1577
http://securitytracker.com/id?1016854
http://www.kb.cert.org/vuls/id/377369
http://www.microsoft.com/technet/security/advisory/925444.mspx
http://www.osvdb.org/28842
http://www.securityfocus.com/archive/1/445898/100/0/threaded
http://www.securityfocus.com/archive/1/446065/100/0/threaded
http://www.securityfocus.com/archive/1/446084/100/0/threaded
http://www.securityfocus.com/archive/1/446085/100/0/threaded
http://www.securityfocus.com/archive/1/446246/100/0/threaded
http://www.securityfocus.com/bid/20047

Get alerted when CVE-2006-4777 or the next vulnerability affects your stack