CVE-2004-0839
- State
- Published
- Severity
- Not scored
- Published
- Sep 14, 2004
- Updated
- Aug 8, 2024
- Reserved
- Sep 8, 2004
Description
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:7721vdb-entrysignature
- 10973vdb-entry
- 20040824 What A Drag! -revisited-mailing-list
- MS04-038vendor-advisory
- oval:org.mitre.oval:def:6272vdb-entrysignature
- 20040818 What A Drag II XP SP2mailing-list
- oval:org.mitre.oval:def:2073vdb-entrysignature
- 20040818 What A Drag II XP SP2mailing-list
- TA04-293Athird-party-advisory
- oval:org.mitre.oval:def:4152vdb-entrysignature
- oval:org.mitre.oval:def:3773vdb-entrysignature
- VU#526089third-party-advisory
- ie-dragdrop-code-execution(17044)vdb-entry
- oval:org.mitre.oval:def:1563vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.