Description
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7721 ↗
- http://www.securityfocus.com/bid/10973 ↗
- http://marc.info/?l=bugtraq&m=109336221826652&w=2 ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6272 ↗
- http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2073 ↗
- http://marc.info/?l=bugtraq&m=109303291513335&w=2 ↗
- http://www.us-cert.gov/cas/techalerts/TA04-293A.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4152 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3773 ↗
- http://www.kb.cert.org/vuls/id/526089 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17044 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1563 ↗