VULNERABILITY INTELLIGENCE

CVE-2006-4301

CVSS score5 MEDIUM

EPSS probability39.05%

CISA KEVNot currently listed

Published2006-08-23

Last modified2026-06-16

Description

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.