CVE-2006-2383

no score yetEPSS 40%

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution.

EPSS: 40% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2006-06-13
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:internet_explorer

References

http://secunia.com/advisories/20595
http://securitytracker.com/id?1016291
http://www.kb.cert.org/vuls/id/417585
http://www.osvdb.org/26444
http://www.securityfocus.com/bid/18303

Check your stack JSON