CVE

Id
9267  
CVE No.
CVE-2004-0839  
Status
Candidate  
Description
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".  
Phase
Assigned (20040908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61328 9267 CVE-2004-0839 FULLDISC:20040818 What A Drag II XP SP2  View
61329 9267 CVE-2004-0839 URL:http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html  View
61330 9267 CVE-2004-0839 BUGTRAQ:20040818 What A Drag II XP SP2  View
61331 9267 CVE-2004-0839 URL:http://marc.info/?l=bugtraq&m=109303291513335&w=2  View
61332 9267 CVE-2004-0839 BUGTRAQ:20040824 What A Drag! -revisited-  View
61333 9267 CVE-2004-0839 URL:http://marc.info/?l=bugtraq&m=109336221826652&w=2  View
61334 9267 CVE-2004-0839 MS:MS04-038  View
61335 9267 CVE-2004-0839 URL:http://www.microsoft.com/technet/security/bulletin/ms04-038.mspx  View
61336 9267 CVE-2004-0839 CERT:TA04-293A  View
61337 9267 CVE-2004-0839 URL:http://www.us-cert.gov/cas/techalerts/TA04-293A.html  View
61338 9267 CVE-2004-0839 CERT-VN:VU#526089  View
61339 9267 CVE-2004-0839 URL:http://www.kb.cert.org/vuls/id/526089  View
61340 9267 CVE-2004-0839 BID:10973  View
61341 9267 CVE-2004-0839 URL:http://www.securityfocus.com/bid/10973  View
61342 9267 CVE-2004-0839 OVAL:oval:org.mitre.oval:def:1563  View
61343 9267 CVE-2004-0839 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1563  View
61344 9267 CVE-2004-0839 OVAL:oval:org.mitre.oval:def:2073  View
61345 9267 CVE-2004-0839 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2073  View
61346 9267 CVE-2004-0839 OVAL:oval:org.mitre.oval:def:3773  View
61347 9267 CVE-2004-0839 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3773  View
61348 9267 CVE-2004-0839 OVAL:oval:org.mitre.oval:def:4152  View
61349 9267 CVE-2004-0839 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4152  View
61350 9267 CVE-2004-0839 OVAL:oval:org.mitre.oval:def:6272  View
61351 9267 CVE-2004-0839 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6272  View
61352 9267 CVE-2004-0839 OVAL:oval:org.mitre.oval:def:7721  View
61353 9267 CVE-2004-0839 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7721  View
61354 9267 CVE-2004-0839 XF:ie-dragdrop-code-execution(17044)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63091 JVNDB-2004-000433 Microsoft Windows/Exchange Server の SMTP コンポーネントにおける任意のコードを実行される脆弱性 Microsoft Windows の SMTP コンポーネントおよび Microsoft Exchange Server の一部として提供される Exchange ルーティングエンジンには、DNS による名前解決に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2004-0840 9267 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000433.html  View