Microsoft · Dximagetransform.Microsoft.Light Activex Control · CVE-2006-2383
**Name of the Vulnerable Software and Affected Versions**
Microsoft Internet Explorer versions 5.01 SP4 and 6 SP1 and earlier
**Description**
The issue allows remote attackers to execute arbitrary code via unexpected data related to parameter validation in the DXImageTransform.Microsoft.Light ActiveX control. This can cause Internet Explorer to crash in a way that enables code execution. An attacker could exploit the vulnerability by constructing a specially crafted Web page, potentially allowing remote code execution if a user visits the specially crafted Web site. A successful exploitation could allow an attacker to take complete control of an affected system.
**Recommendations**
For Microsoft Internet Explorer versions 5.01 SP4 and 6 SP1 and earlier, consider disabling the DXImageTransform.Microsoft.Light ActiveX control as a temporary workaround until a patch is available. Restrict access to Web pages that could potentially exploit this vulnerability to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.