Vulnerability Note VU#641460
Microsoft Windows fails to properly handle COM objects
Microsoft Windows fails to properly handle COM Objects. This vulnerability may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system.
Microsoft COM is a technology that allows programmers to create reusable software components that can be incorporated into applications to extend their functionality. Microsoft COM includes COM+, Distributed COM (DCOM), and ActiveX Controls.
A remote attacker may be able to execute arbitrary code on a vulnerable system. The attacker-supplied code would be executed with the privileges of the user running Windows Explorer.
Apply an Update
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||-||11 Apr 2006|
CVSS Metrics (Learn More)
This document was written by Jeff Gennari.
- CVE IDs: CVE-2006-0012
- Date Public: 11 Apr 2006
- Date First Published: 11 Apr 2006
- Date Last Updated: 15 May 2006
- Severity Metric: 27.00
- Document Revision: 15
If you have feedback, comments, or additional information about this vulnerability, please send us email.