Advisory ID: XSec-06-08 Advisory Name: Windows 2000 Multiple COM Object Instantiation Vulnerability Release Date: 08/21/2006 Tested on: Windows 2000/Internet Explorer 6.0 SP1 Affected version: Windows 2000 Author: nop http://www.xsec.org Overview: Multiple vulnerability has been found in Windows 2000, \ When Internet Explorer tries to instantiate the ciodm.dll, \ MyInfo.dll,msdxm.ocx,Creator.dll(Media player 9) COM object \ as an ActiveX control, it may corrupt system memory in such \ a way that an attacker may DoS and possibly could execute \ arbitrary code. Exploit: =============== 2000obj.htm start ================ COM-tester =============== 2000obj.htm end ================== Link: http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16 About XSec: We are redhat.