CVEvulnerability

CVE-2004-2090

5.0 MEDIUM Published 2004-02-07 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-02-07
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.

Affected configurations

• microsoft ie 6.0 • microsoft internet explorer 5.0.1 • microsoft internet explorer 5.5 • microsoft internet explorer 6.0

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html Exploit, Vendor Advisory
http://secunia.com/advisories/10820 Vendor Advisory
http://www.securityfocus.com/bid/9611 Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15078 exchange.xforce.ibmcloud.com
http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html Exploit, Vendor Advisory
http://secunia.com/advisories/10820 Vendor Advisory
http://www.securityfocus.com/bid/9611 Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15078 exchange.xforce.ibmcloud.com