CVEvulnerability
CVE-2004-0979
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
Affected configurations
• microsoft ie 6.0
• microsoft internet explorer 6.0
• microsoft windows xp
Related
Referenced by CWE · observed example (1)
- CWE-447 Unimplemented or Unsupported Feature in UI weakness
References
- http://www.kb.cert.org/vuls/id/630720 Third Party Advisory, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA04-293A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 exchange.xforce.ibmcloud.com
- http://www.kb.cert.org/vuls/id/630720 Third Party Advisory, US Government Resource
- http://www.us-cert.gov/cas/techalerts/TA04-293A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 exchange.xforce.ibmcloud.com