CVE-2006-4219

CVE-2006-4219 describes a critical vulnerability in the Terminal Services COM object (tsuserex.dll) that allows remote attackers to cause a denial of service or potentially execute arbitrary code. This occurs when the object is instantiated as an ActiveX control within Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for memory corruption in TSUserEX.dll exists on ExploitDB, suggesting proof-of-concept code is publicly available, though there is no evidence of widespread active exploitation or significant community discussion.