CVE-2004-0839
Medium
Description
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
SeverityMedium
CVSS5.0
Exploit probability—
Product
Microsoft Internet Explorer
PublishedAug 18, 2004
First seenAug 18, 2004
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft internet_explorer | 5.0.1, 5.5, 6.0 | — |
| avaya ip600_media_servers | No range specified | — |
| microsoft ie | 6.0 | — |
| avaya definity_one_media_server | No range specified | — |
| avaya s3400 | No range specified | — |
| avaya s8100 | No range specified | — |
| nortel ip_softphone_2050 | No range specified | — |
| nortel mobile_voice_client_2050 | No range specified | — |
| nortel optivity_telephony_manager | No range specified | — |
| nortel symposium_web_centre_portal | No range specified | — |
| nortel symposium_web_client | No range specified | — |
| avaya modular_messaging_message_storage_server | 1.1, 2.0 | — |
| microsoft windows_2000 | No range specified | — |
| microsoft windows_2003_server | enterprise, enterprise_64-bit, r2, standard, web | — |
| microsoft windows_98 | No range specified | — |
| microsoft windows_98se | No range specified | — |
| microsoft windows_me | No range specified | — |
| microsoft windows_xp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.