Unscored severity · published Sep 19, 2006
CVE-2006-4868
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other…
–
CVSS
61.4%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
Exploitation
Is it being used?
Exploit prediction (EPSS)61.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OU
Outlook · Microsoft
2003 · source: NVD
IE
Internet Explorer · Microsoft
6.0; 5.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4868
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4868
blogs.securiteam.com
http://blogs.securiteam.com/index.php/archives/624
Patch
http://secunia.com/advisories/21989
securitytracker.com
http://securitytracker.com/id?1016879
sunbeltblog.blogspot.com
http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html
support.microsoft.com
http://support.microsoft.com/kb/925486
US Government Resource
http://www.kb.cert.org/vuls/id/416092
More from Outlook
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2007-0671
Microsoft Office Excel Remote Code Execution Vulnerability
7.8
CVE-2017-11774
Microsoft Office Outlook Security Feature Bypass Vulnerability
7.8
CVE-2015-1641
Microsoft Office Memory Corruption Vulnerability