CVE-2006-4868

Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.

• CWE-119

• http://blogs.securiteam.com/index.php/archives/624
• http://secunia.com/advisories/21989Patch, Vendor Advisory
• http://securitytracker.com/id?1016879
• http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html
• http://support.microsoft.com/kb/925486
• http://www.kb.cert.org/vuls/id/416092US Government Resource
• http://www.microsoft.com/technet/security/advisory/925568.mspxPatch, Vendor Advisory
• http://www.osvdb.org/28946
• http://www.securityfocus.com/archive/1/446378/100/0/threaded
• http://www.securityfocus.com/archive/1/446505/100/0/threaded
• http://www.securityfocus.com/archive/1/446523/100/0/threaded
• http://www.securityfocus.com/archive/1/446528/100/0/threaded
• http://www.securityfocus.com/archive/1/446881/100/200/threaded
• http://www.securityfocus.com/archive/1/447070/100/0/threaded
• http://www.securityfocus.com/archive/1/448552/100/0/threaded
• http://www.securityfocus.com/bid/20096Exploit, Patch
• http://www.us-cert.gov/cas/techalerts/TA06-262A.htmlPatch, US Government Resource
• http://www.vupen.com/english/advisories/2006/3679Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29004
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100
• http://blogs.securiteam.com/index.php/archives/624
• http://secunia.com/advisories/21989Patch, Vendor Advisory
• http://securitytracker.com/id?1016879
• http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html
• http://support.microsoft.com/kb/925486
• http://www.kb.cert.org/vuls/id/416092US Government Resource
• http://www.microsoft.com/technet/security/advisory/925568.mspxPatch, Vendor Advisory
• http://www.osvdb.org/28946
• http://www.securityfocus.com/archive/1/446378/100/0/threaded
• http://www.securityfocus.com/archive/1/446505/100/0/threaded
• http://www.securityfocus.com/archive/1/446523/100/0/threaded
• http://www.securityfocus.com/archive/1/446528/100/0/threaded
• http://www.securityfocus.com/archive/1/446881/100/200/threaded
• http://www.securityfocus.com/archive/1/447070/100/0/threaded
• http://www.securityfocus.com/archive/1/448552/100/0/threaded
• http://www.securityfocus.com/bid/20096Exploit, Patch
• http://www.us-cert.gov/cas/techalerts/TA06-262A.htmlPatch, US Government Resource
• http://www.vupen.com/english/advisories/2006/3679Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29004
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100

Published

Sep 19, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4862SQL injection vulnerability in default.aspx in easypage allo…
• CVE-2006-4863Multiple PHP remote file inclusion vulnerabilities in Marc C…
• CVE-2006-4864PHP remote file inclusion vulnerability in index.php in All …
• CVE-2006-4865Walter Beschmout PhpQuiz allows remote attackers to obtain s…
• CVE-2006-4866Buffer overflow in kextload in Apple OS X, as used by TDIXSu…
• CVE-2006-4867SQL injection vulnerability in mods.php in GNUTurk 2G and ea…
• CVE-2006-4869PHP remote file inclusion vulnerability in phpunity-postcard…
• CVE-2006-4870Multiple PHP remote file inclusion vulnerabilities in AEDati…
• CVE-2006-4871SQL injection vulnerability in search_run.asp in Keyvan1 (ak…
• CVE-2006-4872SQL injection vulnerability in search.asp in Keyvan1 (aka Ke…
• CVE-2006-4873Jupiter CMS allows remote attackers to obtain sensitive info…
• CVE-2006-4874Multiple cross-site scripting (XSS) vulnerabilities in Jupit…