[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252212

 
 

909

 
 

196748

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2006-4704Date: (C)2006-11-01   (M)2023-12-22


Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.8
Exploit Score: 8.6
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECTRACK-1017142
http://www.securityfocus.com/archive/1/archive/1/454201/100/0/threaded
BID-20797
BID-20843
SECUNIA-22603
MSKB-927709
ADV-2006-4282
HPSBST02180
MS06-073
SSRT061288
TA06-346A
VU#854856
http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx
http://research.eeye.com/html/alerts/zeroday/20061031.html
http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
http://www.zerodayinitiative.com/advisories/ZDI-06-047.html
ie-wscriptshell-command-execution(29915)

CPE    1
cpe:/a:microsoft:visual_studio_.net:2005
OVAL    1
oval:org.mitre.oval:def:288

© SecPod Technologies