CVE-2006-4697

CVE-2006-4697 describes a critical remote code execution vulnerability affecting Microsoft Internet Explorer versions 5.01, 6, and 7, as well as Windows 2000, 2003 Server, and XP. The flaw stems from the improper handling of COM objects from Imjpcksid.dll when used as ActiveX controls, allowing attackers to execute arbitrary code with high impact on confidentiality, integrity, and availability. With a CVSS score of 9.3 and a FAUCET Risk Score of 98/100, this vulnerability is highly severe and easily exploitable over the network with medium attack complexity. While there is no evidence of active exploitation, public exploit code, or significant community discussion, its high EPSS score indicates a substantial likelihood of future exploitation.