Unscored severity · published Aug 31, 2006
CVE-2006-4494
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0…
–
CVSS
22.1%
EPSS
No
On KEV
Description
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll.
Exploitation
Is it being used?
Exploit prediction (EPSS)22.1% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VS
Visual Studio · Microsoft
6.0; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4494
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4494
securityreason.com
http://securityreason.com/securityalert/1473
www.securityfocus.com
http://www.securityfocus.com/archive/1/443499/100/100/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/19572
Exploit
http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15
More from Visual Studio
8.8
CVE-2025-49739
Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network
8.8
CVE-2022-35827
Visual Studio Remote Code Execution Vulnerability
8.8
CVE-2022-35826
Visual Studio Remote Code Execution Vulnerability
8.8
CVE-2022-35825
Visual Studio Remote Code Execution Vulnerability
8.8
CVE-2022-35777
Visual Studio Remote Code Execution Vulnerability