Vulnerability in Microsoft System Information Activex Control
CVE-2006-4627
System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.
EPSS: 0.138 (96.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft System_information_activex_control
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)