« Volver al listado

CVE-2006-4627

Estado: ModificadaMedia (5)—

System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Microsoft — System Information Activex Control

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4627",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-09-07T21:04:00.000",
  "references": [
    {
      "url": "http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/28381",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://noderat.spaces.live.com/blog/cns%216ADE4614B66EADD2%211150.entry",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.blogger.com/comment.g?blogID=30557436&postID=115190809697529918",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/28381",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument."
    },
    {
      "lang": "es",
      "value": "El control de ActiveX de la información del sistema (msinfo.dll), cuando se tiene acceso a través de Microsoft Internet Explorer, permite que los atacantes remotos causen una negación del servicio (caida) a través de la función SaveFile con (1) un equipo informático y posiblemente (2) el nombre del fichero y (3)el argumento de la categoría."
    }
  ],
  "lastModified": "2026-06-16T22:29:28.910",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:microsoft:system_information_activex_control:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AED6547F-BD18-48DA-BAE2-FE170F47CE18"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "when accessed via Microsoft Internet Explorer"
}