Gravedad: High
  Identificadores de CVE : CVE-2006-1303
  Fecha recomendada: 15 de febrero de 2011

  Descripción

 COM Object Instantiation Memory Corruption Vulnerability - CVE-2006-1303

kill bit for a CLSID in the Wmm2fxa.dll file 

B4DC8DD9-2CC1-4081-9B2B-20D7030234EF

cve: Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.

  Revelación de la información

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  Soluciones

  Trend Micro Deep Security DPI Rule Number: 1000555
  Trend Micro Deep Security DPI Rule Name: 1000555 - Microsoft IE COM Object Instantiation Memory Corruption Vulnerability (MS06-021)

  Software y versión afectados

  • Microsoft Internet Explorer 5.0.1
  • Microsoft Internet Explorer 5.0.1 SP1
  • Microsoft Internet Explorer 5.0.1 SP2
  • Microsoft Internet Explorer 5.0.1 SP3
  • Microsoft Internet Explorer 5.0.1 SP4
  • Microsoft Internet Explorer 5.0.1 for Windows 2000
  • Microsoft Internet Explorer 5.0.1 for Windows 95
  • Microsoft Internet Explorer 5.0.1 for Windows 98
  • Microsoft Internet Explorer 5.0.1 for Windows NT 4.0
  • Microsoft Internet Explorer 6
  • Microsoft Internet Explorer 6.0
  • Microsoft Internet Explorer 6.0 SP1