Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2004-0839
HistorySep 14, 2004 - 4:00 a.m.

CVE-2004-0839

2004-09-1404:00:00
[email protected]
web.nvd.nist.gov
26
internet explorer
windows xp
sp2
cve-2004-0839
remote installation
web page
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.4 High

AI Score

Confidence

High

0.846 High

EPSS

Percentile

98.5%

JSON

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by “wottapoop.html”.

Affected configurations

NVD
Node
avayaip600_media_servers
OR
microsoftieMatch6.0sp1
OR
microsoftieMatch6.0sp2
OR
microsoftinternet_explorerMatch5.0.1
OR
microsoftinternet_explorerMatch5.0.1sp1
OR
microsoftinternet_explorerMatch5.0.1sp2
OR
microsoftinternet_explorerMatch5.0.1sp3
OR
microsoftinternet_explorerMatch5.0.1sp4
OR
microsoftinternet_explorerMatch5.5
OR
microsoftinternet_explorerMatch5.5sp1
OR
microsoftinternet_explorerMatch5.5sp2
OR
microsoftinternet_explorerMatch6.0
OR
avayadefinity_one_media_server
OR
avayas3400
OR
avayas8100
Node
nortelip_softphone_2050
OR
nortelmobile_voice_client_2050
OR
norteloptivity_telephony_manager
OR
nortelsymposium_web_centre_portal
OR
nortelsymposium_web_client
OR
avayamodular_messaging_message_storage_serverMatch1.1
OR
avayamodular_messaging_message_storage_serverMatch2.0
OR
microsoftwindows_2000
OR
microsoftwindows_2000sp1
OR
microsoftwindows_2000sp2
OR
microsoftwindows_2000sp3
OR
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serverMatchenterprise64-bit
OR
microsoftwindows_2003_serverMatchenterprise_64-bit
OR
microsoftwindows_2003_serverMatchr264-bit
OR
microsoftwindows_2003_serverMatchr2datacenter_64-bit
OR
microsoftwindows_2003_serverMatchstandard64-bit
OR
microsoftwindows_2003_serverMatchweb
OR
microsoftwindows_98gold
OR
microsoftwindows_98se
OR
microsoftwindows_me
OR
microsoftwindows_xp64-bit
OR
microsoftwindows_xphome
OR
microsoftwindows_xpmedia_center
OR
microsoftwindows_xpgoldprofessional
OR
microsoftwindows_xpsp164-bit
OR
microsoftwindows_xpsp1home
OR
microsoftwindows_xpsp1media_center
OR
microsoftwindows_xpsp2home
OR
microsoftwindows_xpsp2media_center
OR
microsoftwindows_xpsp2tablet_pc

References

Related

checkpoint_advisories 1
nvd 1
cert 1
cvelist 1
securityvulns 4
openvas 2
checkpoint_advisories
checkpoint_advisories
Internet Explorer Drag and Drop Elevation of Privilege (MS04-038; CVE-2004-0839)
2009-12-13 00:00:00
nvd
nvd
CVE-2004-0839
2004-08-18 04:00:00
cert
cert
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
2004-09-14 00:00:00
cvelist
cvelist
CVE-2004-0839
2004-09-14 04:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS05-008 Vulnerability in Windows Shell Could Allow Remote Code Execution (890047)
2005-02-08 00:00:00
US-CERT Technical Cyber Security Alert TA04-293A -- Multiple Vulnerabilities in Microsoft Internet Explorer
2004-10-22 00:00:00
Microsoft Security Bulletin MS05-014 Cumulative Security Update for Internet Explorer (867282)
2005-02-09 00:00:00
openvas
openvas
IE 5.01 5.5 6.0 Cumulative patch (890923)
2005-11-03 00:00:00
IE 5.01 5.5 6.0 Cumulative patch (890923)
2005-11-03 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.4 High

AI Score

Confidence

High

0.846 High

EPSS

Percentile

98.5%

JSON
Related for CVE-2004-0839
checkpoint_advisories1nvd1cert1cvelist1securityvulns4openvas2