CVE-2006-4777

The record

Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.

Affected packages

Related vulnerabilities

• CVE-2026-13573 A vulnerability was found in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-13574 A vulnerability was determined in llvm llvm-project up to 22.1.6. CWE-119
• CVE-2026-12806 A vulnerability has been found in Edimax BR-6478AC V2 1.23. CWE-119
• CVE-2026-12805 A flaw has been found in OFFIS DCMTK up to 3.7.0. CWE-119
• CVE-2026-42488 Some shadow paging errors paths will switch the page-tables without updating the… CWE-119
• CVE-2026-12327 Memory safety bugs present in Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and… CWE-119
• CVE-2026-12330 Incorrect boundary conditions in the Internationalization component. CWE-119
• CVE-2026-12326 Memory safety bugs present in Firefox 151 and Thunderbird 151. CWE-119