CVE-2006-4704
Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."
- Affected products
- Visual Studio, Wmi Object Broker Activex Control, Wmiscriptutils.Dll
- Microsoft Visual Studio .net
- = 2005
- Fix
- Available
- CVSS 2.0
- 6.8 MEDIUM
- EPSS
- 43.7% (99th percentile)
- NVD status
- Modified
- Published
- 2006-11-01
CVE-2006-4704 at NVD
6 known exploits for CVE-2006-4704
Proof-of-concept code and exploit modules indexed by Sploitus
Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)
MS06-014 Microsoft Internet Explorer COM CreateObject Code Execution
Microsoft Visual Studio 2005 WMI Object Broker vulnerability
Microsoft Visual Studio 2005 WMI Object Broker vulnerability
Microsoft Visual Studio 2005 WMI Object Broker vulnerability
Microsoft Visual Studio 2005 WMI Object Broker vulnerability