← back
CVE-2006-4704

CVE-2006-4704

EPSS 42.8%
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16561unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspxhttp://research.eeye.com/html/alerts/zeroday/20061031.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073http://secunia.com/advisories/22603http://securitytracker.com/id?1017142https://exchange.xforce.ibmcloud.com/vulnerabilities/29915https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288http://www.kb.cert.org/vuls/id/854856http://www.microsoft.com/technet/security/advisory/927709.mspxhttp://www.securityfocus.com/archive/1/454201/100/0/threadedhttp://www.securityfocus.com/archive/1/454969/100/200/threadedhttp://www.securityfocus.com/bid/20797