CVEvulnerability

CVE-2004-1686

5.0 MEDIUM Published 2004-09-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-09-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin.

Affected configurations

• microsoft ie 6.0

Related

Referenced by CWE · observed example (1)

  • CWE-151 Improper Neutralization of Comment Delimiters weakness

References