PT-2004-1992 · Microsoft · Windows Xp+1

Will Dormann · Published 2004-10-21 · Updated 2021-07-23 · CVE-2004-0979

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer on Windows XP

Description: The issue arises from Internet Explorer on Windows XP not properly modifying the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt". This may enable security-sensitive operations that are inconsistent with the user's intended configuration.

Recommendations: For Internet Explorer on Windows XP, consider disabling the drag and drop feature or setting it to prompt as a temporary workaround until a proper fix is applied.

Fix

Related Identifiers

CVE-2004-0979

Affected Products

Internet Explorer

Windows Xp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-0979 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 · Note
• http://kb.cert.org/vuls/id/630720 · Note
• http://us-cert.gov/cas/techalerts/TA04-293A.html · Note