Vulnerabilities > CVE-2006-4627 - Unspecified vulnerability in Microsoft System Information Activex Control
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry
- http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry
- http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918
- http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918
- http://www.osvdb.org/28381
- http://www.osvdb.org/28381