CVE-2006-4868

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 61.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-09-19 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.

Affected products

Microsoft Internet Explorer 11: 6.0, 5.0.1-sp4
Microsoft Outlook: 2003

References

http://blogs.securiteam.com/index.php/archives/624
http://secunia.com/advisories/21989
http://securitytracker.com/id?1016879
http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html
http://support.microsoft.com/kb/925486
http://www.kb.cert.org/vuls/id/416092
http://www.microsoft.com/technet/security/advisory/925568.mspx
http://www.osvdb.org/28946
http://www.securityfocus.com/archive/1/446378/100/0/threaded
http://www.securityfocus.com/archive/1/446505/100/0/threaded
http://www.securityfocus.com/archive/1/446523/100/0/threaded
http://www.securityfocus.com/archive/1/446528/100/0/threaded

Get alerted when CVE-2006-4868 or the next vulnerability affects your stack