{"id":"CVE-2006-4704","aliases":["EUVD-2006-4691","GHSA-c2c7-569v-pv4f"],"status":"published","title":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2)...","description":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.45595,"percentile":0.98801,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2006-11-01T15:00:00Z","modified":"2026-06-16T22:29:37Z","exploits":[{"source":"exploitdb","id":"EDB-16561","title":"Microsoft Internet Explorer - COM CreateObject Code Execution (MS06-014/MS06-073) (Metasploit)","type":"remote","platform":"windows","date":"2010-09-20","verified":true,"url":"https://www.exploit-db.com/exploits/16561"},{"source":"metasploit","id":"exploit/windows/browser/ie_createobject","title":"MS06-014 Microsoft Internet Explorer COM CreateObject Code Execution","type":"exploit","platform":"Windows","date":"2006-04-11","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/ie_createobject"}],"products":[{"vendor":"microsoft","product":"visual_studio_.net"}],"references":[{"url":"http://www.securityfocus.com/bid/20843","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/archive/1/454201/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://research.eeye.com/html/alerts/zeroday/20061031.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://www.microsoft.com/technet/security/advisory/927709.mspx","tags":["vendor-advisory","x_refsource_MSKB","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/20797","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA06-346A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://secunia.com/advisories/22603","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/4282","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/454969/100/200/threaded","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://securitytracker.com/id?1017142","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/854856","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-06-047.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29915","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-4704"},{"url":"https://github.com/advisories/GHSA-c2c7-569v-pv4f"}],"sources":{"cve":[{"id":"CVE-2006-4704","description":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","status":"published","published":"2006-11-01T15:00:00Z","modified":"2024-08-07T19:23:41.174Z","updated_at":"2026-11-02T14:33:51.470623Z"}],"euvd":[{"id":"EUVD-2006-4691","description":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","status":"published","published":"2006-11-01T15:00:00Z","modified":"2024-08-07T19:23:41Z","updated_at":"2026-11-03T01:15:50.798383Z"}],"ghsa":[{"id":"GHSA-c2c7-569v-pv4f","title":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2)...","description":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","status":"published","published":"2022-05-01T07:21:15Z","modified":"2023-01-31T05:01:57Z","updated_at":"2026-11-02T14:48:10.096738Z"}],"nvd":[{"id":"CVE-2006-4704","description":"Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","status":"published","published":"2006-11-01T15:07:00Z","modified":"2026-06-16T22:29:37.21Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:07.481037Z"}]}}