{"api_version":"1","generated_at":"2026-07-23T12:25:43+00:00","cve":"CVE-2006-4704","urls":{"html":"https://cve.report/CVE-2006-4704","api":"https://cve.report/api/cve/CVE-2006-4704.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4704","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4704"},"summary":{"title":"CVE-2006-4704","description":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","state":"PUBLISHED","assigner":"microsoft","published_at":"2006-11-01 15:07:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073","name":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Security Bulletin MS06-073 - Critical | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/22603","name":"http://secunia.com/advisories/22603","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Microsoft Visual Studio WMI Object Broker ActiveX Control Code Execution - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html","name":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"ZDI-06-047","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-346A.html","name":"http://www.us-cert.gov/cas/techalerts/TA06-346A.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA06-346A -- Microsoft Updates for Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://research.eeye.com/html/alerts/zeroday/20061031.html","name":"http://research.eeye.com/html/alerts/zeroday/20061031.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Resources | BeyondTrust","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.microsoft.com/technet/security/advisory/927709.mspx","name":"http://www.microsoft.com/technet/security/advisory/927709.mspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Your request has been blocked. This could be\r\n                        due to several reasons.","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/4282","name":"http://www.vupen.com/english/advisories/2006/4282","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/854856","name":"http://www.kb.cert.org/vuls/id/854856","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"VU#854856 - WMI Object Broker ActiveX Control bypasses ActiveX security model","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20843","name":"http://www.securityfocus.com/bid/20843","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Microsoft Visual Studio 2005 WMI Object Broker Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/454201/100/0/threaded","name":"http://www.securityfocus.com/archive/1/454201/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20797","name":"http://www.securityfocus.com/bid/20797","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Retired: Microsoft Internet Explorer Unspecified Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded","name":"http://www.securityfocus.com/archive/1/454969/100/200/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx","name":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Welcome to the Microsoft Security Response Center Blog! : Microsoft Security Advisory (927709) Posted","mime":"text/html","httpstatus":"503","archivestatus":"200"},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf","name":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"application/pdf","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1017142","name":"http://securitytracker.com/id?1017142","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Visual Studio WMI Object Broker ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4704","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4704","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4704","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"visual_studio_.net","cpe6":"2005","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T19:23:41.174Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20843","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20843"},{"name":"20061212 ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/454201/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://research.eeye.com/html/alerts/zeroday/20061031.html"},{"name":"MS06-073","tags":["vendor-advisory","x_refsource_MS","x_transferred"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073"},{"name":"927709","tags":["vendor-advisory","x_refsource_MSKB","x_transferred"],"url":"http://www.microsoft.com/technet/security/advisory/927709.mspx"},{"name":"20797","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/20797"},{"name":"TA06-346A","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.us-cert.gov/cas/techalerts/TA06-346A.html"},{"name":"22603","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/22603"},{"name":"ADV-2006-4282","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/4282"},{"name":"oval:org.mitre.oval:def:288","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288"},{"name":"SSRT061288","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded"},{"name":"1017142","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1017142"},{"name":"HPSBST02180","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded"},{"name":"VU#854856","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/854856"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html"},{"name":"ie-wscriptshell-command-execution(29915)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-11-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"name":"20843","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20843"},{"name":"20061212 ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/454201/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://research.eeye.com/html/alerts/zeroday/20061031.html"},{"name":"MS06-073","tags":["vendor-advisory","x_refsource_MS"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073"},{"name":"927709","tags":["vendor-advisory","x_refsource_MSKB"],"url":"http://www.microsoft.com/technet/security/advisory/927709.mspx"},{"name":"20797","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/20797"},{"name":"TA06-346A","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.us-cert.gov/cas/techalerts/TA06-346A.html"},{"name":"22603","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/22603"},{"name":"ADV-2006-4282","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/4282"},{"name":"oval:org.mitre.oval:def:288","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288"},{"name":"SSRT061288","tags":["vendor-advisory","x_refsource_HP"],"url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded"},{"name":"1017142","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1017142"},{"name":"HPSBST02180","tags":["vendor-advisory","x_refsource_HP"],"url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded"},{"name":"VU#854856","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/854856"},{"tags":["x_refsource_MISC"],"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf"},{"tags":["x_refsource_MISC"],"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html"},{"name":"ie-wscriptshell-command-execution(29915)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915"},{"tags":["x_refsource_CONFIRM"],"url":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","ID":"CVE-2006-4704","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20843","refsource":"BID","url":"http://www.securityfocus.com/bid/20843"},{"name":"20061212 ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/454201/100/0/threaded"},{"name":"http://research.eeye.com/html/alerts/zeroday/20061031.html","refsource":"MISC","url":"http://research.eeye.com/html/alerts/zeroday/20061031.html"},{"name":"MS06-073","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073"},{"name":"927709","refsource":"MSKB","url":"http://www.microsoft.com/technet/security/advisory/927709.mspx"},{"name":"20797","refsource":"BID","url":"http://www.securityfocus.com/bid/20797"},{"name":"TA06-346A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA06-346A.html"},{"name":"22603","refsource":"SECUNIA","url":"http://secunia.com/advisories/22603"},{"name":"ADV-2006-4282","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/4282"},{"name":"oval:org.mitre.oval:def:288","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288"},{"name":"SSRT061288","refsource":"HP","url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded"},{"name":"1017142","refsource":"SECTRACK","url":"http://securitytracker.com/id?1017142"},{"name":"HPSBST02180","refsource":"HP","url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded"},{"name":"VU#854856","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/854856"},{"name":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf","refsource":"MISC","url":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf"},{"name":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html","refsource":"MISC","url":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html"},{"name":"ie-wscriptshell-command-execution(29915)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915"},{"name":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx","refsource":"CONFIRM","url":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx"}]}}}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2006-4704","datePublished":"2006-11-01T15:00:00.000Z","dateReserved":"2006-09-11T00:00:00.000Z","dateUpdated":"2024-08-07T19:23:41.174Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-11-01 15:07:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2005:*:*:*:*:*:*:*","matchCriteriaId":"EBED7535-0091-4B27-B261-384CEADFE362"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4704","Ordinal":"1","Title":"CVE-2006-4704","CVE":"CVE-2006-4704","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4704","Ordinal":"1","NoteData":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","Type":"Description","Title":"CVE-2006-4704"},{"CveYear":"2006","CveId":"4704","Ordinal":"2","NoteData":"2006-11-01","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4704","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}