NVD

Id
70669  
Name
CVE-2004-0216  
Description
Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-11-03  
Modified Date
2017-07-10  
Seq
2004-0216  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
364579 70669 CVE-2004-0216 20041012 Microsoft Internet Explorer Install Engine Control Buffer Overflow  View
364580 70669 CVE-2004-0216 20050119 Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)  View
364581 70669 CVE-2004-0216 20050119 Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a)  View
364582 70669 CVE-2004-0216 oval:org.mitre.oval:def:5316  View
364583 70669 CVE-2004-0216 oval:org.mitre.oval:def:5329  View
364584 70669 CVE-2004-0216 oval:org.mitre.oval:def:6100  View
364585 70669 CVE-2004-0216 oval:org.mitre.oval:def:6600  View
364586 70669 CVE-2004-0216 oval:org.mitre.oval:def:7717  View
364587 70669 CVE-2004-0216 oval:org.mitre.oval:def:7865  View
364588 70669 CVE-2004-0216 VU#637760  View
364589 70669 CVE-2004-0216 MS04-038  View
364590 70669 CVE-2004-0216 http://www.ngssoftware.com/advisories/msinsengfull.txt  View
364591 70669 CVE-2004-0216 TA04-293A  View
364592 70669 CVE-2004-0216 ie-installenginectl-setciffile-bo(17620)  View
364593 70669 CVE-2004-0216 ie-ms04038-patch(17651)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63088 JVNDB-2004-000430 Microsoft Internet Explorer の iseng.dll におけるバッファオーバーフローの脆弱性 Microsoft Internet Explorer のインストールエンジン (inseng.dll) には、取り扱うメッセージ長を適切にチェックしない不備のため、過度に長いメッセージを受信した場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0216 8643 CVE-2004-0216 70669 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000430.html 2004-10-12 2007-04-01 View