CVE-2006-4495: Microsoft Ie

High severity, CVSS 7.5. EPSS: 20.7% chance of exploitation in the next 30 days.

Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Windows 2003 Server: version 2000_server only; version advanced_server only; version datacenter_server only; version professional only

Published 2006-08-31. Last modified 2026-06-16.