PT-2004-1594 · Microsoft · Internet Explorer 6+1

Published 2004-05-20 · Updated 2017-07-11 · CVE-2004-0475

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer 6 version on Windows XP Pro

Description The issue allows remote attackers to execute arbitrary local .CHM files via a double backward slash before the target CHM file. This can be demonstrated using an "ms-its" URL to ntshared.chm.

Recommendations For Internet Explorer 6 on Windows XP Pro, consider disabling the showHelp function as a temporary workaround until a patch is available. Restrict access to local .CHM files to minimize the risk of exploitation. Avoid using the "ms-its" URL scheme in Internet Explorer until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-0475

Affected Products

Internet Explorer 6

Windows Xp Pro

References · 4

• 🔥 http://securityfocus.com/archive/1/363202 · Exploit
• 🔥 http://securityfocus.com/bid/10348 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0475 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16147 · Note