PT-2004-1901 · Microsoft · Windows Xp+1
Http-Equiv
·
Publicado
2004-08-18
·
Atualizado
2021-07-23
·
CVE-2004-0839
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
Internet Explorer versions 5.01 through 5.5
Internet Explorer in Windows XP SP2
Description:
The issue allows remote attackers to install arbitrary programs via a web page that utilizes certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder.
Recommendations:
For Internet Explorer versions 5.01 through 5.5, consider disabling the drag-and-drop capability and AnchorClick behavior as a temporary workaround until a patch is available.
For Internet Explorer in Windows XP SP2, restrict access to the local startup folder to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Internet Explorer
Windows Xp