CVE-2006-4704

Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability."

• http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx
• http://research.eeye.com/html/alerts/zeroday/20061031.html
• http://secunia.com/advisories/22603Vendor Advisory
• http://securitytracker.com/id?1017142
• http://www.kb.cert.org/vuls/id/854856US Government Resource
• http://www.microsoft.com/technet/security/advisory/927709.mspxVendor Advisory
• http://www.securityfocus.com/archive/1/454201/100/0/threaded
• http://www.securityfocus.com/archive/1/454969/100/200/threaded
• http://www.securityfocus.com/bid/20797
• http://www.securityfocus.com/bid/20843Exploit
• http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
• http://www.us-cert.gov/cas/techalerts/TA06-346A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4282Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-047.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29915
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288
• http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx
• http://research.eeye.com/html/alerts/zeroday/20061031.html
• http://secunia.com/advisories/22603Vendor Advisory
• http://securitytracker.com/id?1017142
• http://www.kb.cert.org/vuls/id/854856US Government Resource
• http://www.microsoft.com/technet/security/advisory/927709.mspxVendor Advisory
• http://www.securityfocus.com/archive/1/454201/100/0/threaded
• http://www.securityfocus.com/archive/1/454969/100/200/threaded
• http://www.securityfocus.com/bid/20797
• http://www.securityfocus.com/bid/20843Exploit
• http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf
• http://www.us-cert.gov/cas/techalerts/TA06-346A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4282Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-047.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29915
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288

Published

Nov 1, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4698Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-4699Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-4700Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-4701Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-4702Buffer overflow in the Windows Media Format Runtime in Micro…
• CVE-2006-4703Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2006-4705SQL injection vulnerability in login.php in dwayner79 and Do…
• CVE-2006-4706Cross-site scripting (XSS) vulnerability in inc/functions_po…
• CVE-2006-4707Cross-site scripting (XSS) vulnerability in admin/global.php…
• CVE-2006-4708Multiple cross-site scripting (XSS) vulnerabilities in Vikin…
• CVE-2006-4709SQL injection vulnerability in topic.php in Vikingboard 0.1b…
• CVE-2006-4710Multiple cross-site scripting (XSS) vulnerabilities in NewsG…