CVE:CVE-2006-4495
CNNVD:CNNVD-200608-509
Microsoft Internet Explorer浏览器允许远程攻击者通过对某些Windows 2000 ActiveX COM对象，包括：(1) ciodm.dll，(2) myinfo.dll，(3) msdxm.ocx和(4) creator.dll进行实例化操作，从而触发拒绝服务攻击(内存破坏)，并可能执行任意代码。
solution:Upgrade microsoft ie to a higher version than 6.0:sp1,and avoid the version 6.0:sp1; Upgrade microsoft windows_2003_server to a higher version than 2000_server,2000_server:sp1,2000_server:sp2,2000_server:sp3,2000_server:sp4,advanced_server,advanced_server:sp1,advanced_server:sp2,advanced_server:sp3,advanced_server:sp4,datacenter_server,datacenter_server:sp1,datacenter_server:sp2,datacenter_server:sp3,datacenter_server:sp4,professional,professional:sp1,professional:sp2,professional:sp3,professional:sp4,and avoid the version 2000_server,2000_server:sp1,2000_server:sp2,2000_server:sp3,2000_server:sp4,advanced_server,advanced_server:sp1,advanced_server:sp2,advanced_server:sp3,advanced_server:sp4,datacenter_server,datacenter_server:sp1,datacenter_server:sp2,datacenter_server:sp3,datacenter_server:sp4,professional,professional:sp1,professional:sp2,professional:sp3,professional:sp4