CVE-2006-4446

None

CVSS

—

EPSS

62.2%

Published

Aug 30, 2006

CISA due date

—

The record

Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points.

Affected packages

Ecosystem	Package	Introduced	Fixed