Skip to content
Fencer Vulns
high 7.5

CVE-2006-4193 in the critical feed json

Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute a…

published 2006-08-17 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4183

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
47.5%
EPSS 47.5% chance of exploitation in 30 days, percentile 98%
public exploits
2
Exploit-DB

Summary

Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files.

Timeline

  1. First public exploit (EDB-28389)
  2. Published

Exploit prediction

47.48% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-28389 Microsoft Internet Explorer 6 - 'MSOE.dll' Denial of Service dos, 2006-08-15
  • EDB-28387 Microsoft Internet Explorer 6 - 'IMSKDIC.dll' Denial of Service dos, 2006-08-15
  • xsec.org http://www.xsec.org/index.php?module=releases&act=view&type=1&id=8 referenced PoC, tagged "exploit" by a source, unverified
  • securityfocus.com http://www.securityfocus.com/bid/19530 referenced PoC, tagged "exploit" by a source, unverified
  • xsec.org http://www.xsec.org/index.php?module=releases&act=view&type=1&id=10 referenced PoC, tagged "exploit" by a source, unverified
  • securityfocus.com http://www.securityfocus.com/bid/19521 referenced PoC, tagged "exploit" by a source, unverified
  • securityfocus.com http://www.securityfocus.com/bid/19529 referenced PoC, tagged "exploit" by a source, unverified
  • xsec.org http://www.xsec.org/index.php?module=releases&act=view&type=1&id=9 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.