Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2006-4627
cve-2006-4627
nvd
system information
activex control
msinfo.dll
denial of service
remote attackers
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.1 High
AI Score
Confidence
High
0.056 Low
EPSS
Percentile
93.3%
System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.
Affected configurations
Node
microsoftsystem_information_activex_control
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:system_information_activex_control | microsoft system information activex control | eq | * |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.1 High
AI Score
Confidence
High
0.056 Low
EPSS
Percentile
93.3%
Related for CVE-2006-4627