CVE-2006-4301: Microsoft Ie

Medium severity, CVSS 5.0. EPSS: 39.1% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple DirectX Media Image DirectX Transforms ActiveX COM Objects from (a) dxtmsft.dll and (b) dxtmsft3.dll, including (1) DXImageTransform.Microsoft.MaskFilter.1, (2) DXImageTransform.Microsoft.Chroma.1, and (3) DX3DTransform.Microsoft.Shapes.1.

Affected products

• Microsoft Ie: version 6.0 only

Published 2006-08-23. Last modified 2026-06-16.