National Cyber Awareness System

Vulnerability Summary for CVE-2006-4777

Overview

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA06-318A

Name: TA06-318A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA06-318A.html

US-CERT Vulnerability Note: VU#377369

Name: VU#377369

Hyperlink:http://www.kb.cert.org/vuls/id/377369

External Source: XF

Name: ie-directanimation-code-execution(28942)

Hyperlink:http://xforce.iss.net/xforce/xfdb/28942

External Source: MISC

Name: http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20

Hyperlink:http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20

External Source: VUPEN

Name: ADV-2006-3593

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2006/3593

External Source: BID

Name: 20047

Hyperlink:http://www.securityfocus.com/bid/20047

External Source: BUGTRAQ

Name: 20060918 Re: IE ActiveX 0day?

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/446246/100/0/threaded

External Source: BUGTRAQ

Name: 20060915 Re: Fwd: IE ActiveX 0day?

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/446085/100/0/threaded

External Source: BUGTRAQ

Name: 20060915 RE: IE ActiveX 0day?

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/446084/100/0/threaded

External Source: BUGTRAQ

Name: 20060915 Fwd: IE ActiveX 0day?

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/446065/100/0/threaded

External Source: BUGTRAQ

Name: 20060913 [0day] daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/445898/100/0/threaded

External Source: OSVDB

Name: 28842

Hyperlink:http://www.osvdb.org/28842

External Source: MS

Name: MS06-067

Hyperlink:http://www.microsoft.com/technet/security/bulletin/ms06-067.mspx

External Source: CONFIRM

Name: http://www.microsoft.com/technet/security/advisory/925444.mspx

Hyperlink:http://www.microsoft.com/technet/security/advisory/925444.mspx

External Source: SECTRACK

Name: 1016854

Hyperlink:http://securitytracker.com/id?1016854

External Source: SREASON

Name: 1577

Hyperlink:http://securityreason.com/securityalert/1577

External Source: SECUNIA

Name: 21910

Type: Advisory

Hyperlink:http://secunia.com/advisories/21910

External Source: MILW0RM

Name: 2358

Hyperlink:http://milw0rm.com/exploits/2358

US Government Resource: oval:org.mitre.oval:def:1103

Name: oval:org.mitre.oval:def:1103

Type: Tool Signature

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1103

References to Check Content

Identifier:oval:org.mitre.oval:def:1103

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:1103