CVEvulnerability

CVE-2004-0839

5.0 MEDIUM Published 2004-08-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-08-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

Affected configurations

• avaya ip600 media servers • microsoft ie 6.0 • microsoft internet explorer 5.0.1 • microsoft internet explorer 5.5 • microsoft internet explorer 6.0 • avaya definity one media server • avaya s3400 • avaya s8100 • nortel ip softphone 2050 • nortel mobile voice client 2050 • nortel optivity telephony manager • nortel symposium web centre portal • nortel symposium web client • avaya modular messaging message storage server 1.1 • avaya modular messaging message storage server 2.0 • microsoft windows 2000 • microsoft windows 2003 server enterprise • microsoft windows 2003 server enterprise 64-bit • microsoft windows 2003 server r2 • microsoft windows 2003 server standard • microsoft windows 2003 server web • microsoft windows 98 • microsoft windows 98se • microsoft windows me • microsoft windows xp

References