PT-2004-1992 · Microsoft · Windows Xp+1

Will Dormann · Publicado 2004-10-21 · Atualizado 2021-07-23 · CVE-2004-0979

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer on Windows XP

Description: The issue arises from Internet Explorer on Windows XP not properly modifying the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt". This may enable security-sensitive operations that are inconsistent with the user's intended configuration.

Recommendations: For Internet Explorer on Windows XP, consider disabling the drag and drop feature or setting it to prompt as a temporary workaround until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2004-0979

Produtos afetados

Internet Explorer

Windows Xp

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 · Nota
• http://kb.cert.org/vuls/id/630720 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0979 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA04-293A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 · Aviso do Fabricante