PT-2004-1901
CVE-2004-0839
·
تاريخ النشر
2004-08-18
·
تاريخ التحديث
2021-07-23
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
Internet Explorer versions 5.01 through 5.5
Internet Explorer in Windows XP SP2
Description:
The issue allows remote attackers to install arbitrary programs via a web page that utilizes certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder.
Recommendations:
For Internet Explorer versions 5.01 through 5.5, consider disabling the drag-and-drop capability and AnchorClick behavior as a temporary workaround until a patch is available.
For Internet Explorer in Windows XP SP2, restrict access to the local startup folder to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾