Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• avaya definity one media serverall versions
• avaya ip600 media serversall versions
• avaya modular messaging message storage server1.1
• avaya modular messaging message storage server2.0
• avaya s3400all versions
• avaya s8100all versions
• microsoft ie6.0
• microsoft internet explorer5.0.1
• microsoft internet explorer5.5
• microsoft internet explorer6.0
• microsoft windows 2000all versions
• microsoft windows 2003 serverenterprise
• microsoft windows 2003 serverenterprise_64-bit
• microsoft windows 2003 serverr2
• microsoft windows 2003 serverstandard
• microsoft windows 2003 serverweb
• microsoft windows 98all versions
• microsoft windows 98seall versions
• microsoft windows meall versions
• microsoft windows xpall versions

Other highest-scoring records for the same primary product.

• CVE-2004-1050Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes
  60This week
• CVE-2004-0212Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote
  59Plan
• CVE-2004-0842Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash
  47Plan
• CVE-2004-0841Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use dra
  35Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.