CVE-2006-4704: Microsoft Visual Studio .net

Medium severity, CVSS 6.8. EPSS: 45.6% chance of exploitation in the next 30 days.

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."

Affected products

• Microsoft Visual Studio .net: version 2005 only

Published 2006-11-01. Last modified 2026-06-16.