{"api_version":"1","generated_at":"2026-07-23T07:48:32+00:00","cve":"CVE-2006-4777","urls":{"html":"https://cve.report/CVE-2006-4777","api":"https://cve.report/api/cve/CVE-2006-4777.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-4777","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-4777"},"summary":{"title":"CVE-2006-4777","description":"Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-09-14 00:07:00","updated_at":"2018-10-17 21:39:00"},"problem_types":["CWE-119"],"metrics":[],"references":[{"url":"http://www.osvdb.org/28842","name":"28842","refsource":"OSVDB","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.kb.cert.org/vuls/id/377369","name":"VU#377369","refsource":"CERT-VN","tags":["US Government Resource"],"title":"US-CERT Vulnerability Note VU#377369","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/20047","name":"20047","refsource":"BID","tags":[],"title":"Microsoft Internet Explorer Daxctle.OCX KeyFrame Method Heap Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-318A.html","name":"TA06-318A","refsource":"CERT","tags":["US Government Resource"],"title":"US-CERT Technical Cyber Security Alert TA06-318A -- Microsoft Security Updates for Windows, Internet Explorer, and Adobe Flash","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.microsoft.com/technet/security/advisory/925444.mspx","name":"http://www.microsoft.com/technet/security/advisory/925444.mspx","refsource":"CONFIRM","tags":[],"title":"Your request has been blocked. This could be\r\n                        due to several reasons.","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446065/100/0/threaded","name":"20060915 Fwd: IE ActiveX 0day?","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/1577","name":"1577","refsource":"SREASON","tags":[],"title":"SecurityReason - [0day] daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067","name":"MS06-067","refsource":"MS","tags":[],"title":"Microsoft Security Bulletin MS06-067 - Critical | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28942","name":"ie-directanimation-code-execution(28942)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21910","name":"21910","refsource":"SECUNIA","tags":["Vendor Advisory"],"title":"Internet Explorer Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/3593","name":"ADV-2006-3593","refsource":"VUPEN","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446085/100/0/threaded","name":"20060915 Re: Fwd: IE ActiveX 0day?","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20","name":"http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20","refsource":"MISC","tags":[],"title":"XSec => daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit","mime":"text/x-c","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/445898/100/0/threaded","name":"20060913 [0day] daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/x-c","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103","name":"oval:org.mitre.oval:def:1103","refsource":"OVAL","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016854","name":"1016854","refsource":"SECTRACK","tags":[],"title":"SecurityTracker.com Archives - Microsoft Internet Explorer Buffer Overflow in 'daxctle.ocx' ActiveX in KeyFrame Method Control Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446246/100/0/threaded","name":"20060918 Re: IE ActiveX 0day?","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/446084/100/0/threaded","name":"20060915 RE: IE ActiveX 0day?","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-4777","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4777","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"4777","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"ie","cpe6":"6.0","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"4777","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"ie","cpe6":"6.0","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-4777","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1016854","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016854"},{"name":"21910","refsource":"SECUNIA","url":"http://secunia.com/advisories/21910"},{"name":"1577","refsource":"SREASON","url":"http://securityreason.com/securityalert/1577"},{"name":"TA06-318A","refsource":"CERT","url":"http://www.us-cert.gov/cas/techalerts/TA06-318A.html"},{"name":"http://www.microsoft.com/technet/security/advisory/925444.mspx","refsource":"CONFIRM","url":"http://www.microsoft.com/technet/security/advisory/925444.mspx"},{"name":"ADV-2006-3593","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/3593"},{"name":"28842","refsource":"OSVDB","url":"http://www.osvdb.org/28842"},{"name":"20060918 Re: IE ActiveX 0day?","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446246/100/0/threaded"},{"name":"20060915 RE: IE ActiveX 0day?","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446084/100/0/threaded"},{"name":"VU#377369","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/377369"},{"name":"http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20","refsource":"MISC","url":"http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20"},{"name":"ie-directanimation-code-execution(28942)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28942"},{"name":"20047","refsource":"BID","url":"http://www.securityfocus.com/bid/20047"},{"name":"20060915 Fwd: IE ActiveX 0day?","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446065/100/0/threaded"},{"name":"oval:org.mitre.oval:def:1103","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103"},{"name":"MS06-067","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067"},{"name":"20060913 [0day] daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/445898/100/0/threaded"},{"name":"20060915 Re: Fwd: IE ActiveX 0day?","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/446085/100/0/threaded"}]}},"nvd":{"publishedDate":"2006-09-14 00:07:00","lastModifiedDate":"2018-10-17 21:39:00","problem_types":["CWE-119"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"severity":"HIGH","exploitabilityScore":4.9,"impactScore":10,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"4777","Ordinal":"20116","Title":"CVE-2006-4777","CVE":"CVE-2006-4777","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"4777","Ordinal":"1","NoteData":"Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"4777","Ordinal":"2","NoteData":"2006-09-13","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"4777","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}