CVE-2006-4868
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in...
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
- Record
CVE-2006-4868- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
- Record
CVE-2006-4868- Updated
- 2026-11-02
EUVDEUVD-2006-4855 No score
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
- Record
EUVD-2006-4855- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-57hx-f9jp-528m No score
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in...
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
- Record
GHSA-57hx-f9jp-528m- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer - 'VML' Fill Method Code Execution (MS06-055) (Metasploit) | 2010-07-03 |
| Exploit-DB | Microsoft Internet Explorer (Windows XP SP2) - 'VML' Remote Buffer Overflow | 2006-09-24 |
| Exploit-DB | Microsoft Internet Explorer - 'VML' Remote Buffer Overflow (SP2) | 2006-09-25 |
| Metasploit | MS06-055 Microsoft Internet Explorer VML Fill Method Code Execution | 2006-09-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4868 is a high vulnerability (CVSS 9.3) in Microsoft Internet Explorer, published September 19, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 61.4%, the 99th percentile. No source names a fixed version.
References
blogs.securiteam.com/index.php/archives/624
securityfocus.com/archive/1/446881/100/200/threaded
vupen.com/english/advisories/2006/3679
Show 17 moreShow less
kb.cert.org/vuls/id/416092
microsoft.com/technet/security/advisory/925568.mspx
support.microsoft.com/kb/925486
secunia.com/advisories/21989
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055
us-cert.gov/cas/techalerts/TA06-262A.html
osvdb.org/28946
securitytracker.com/id?1016879
sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100
exchange.xforce.ibmcloud.com/vulnerabilities/29004
nvd.nist.gov/vuln/detail/CVE-2006-4868
github.com/advisories/GHSA-57hx-f9jp-528m