← Database

CVE-2004-0839

MEDIUM CVSS: 5.0 Published: 2004-08-18 Modified: 2026-06-16

Description

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

Affected Platforms

Microsoft Windows 2003 ServerMicrosoft Windows 98Avaya S3400Microsoft Windows 98SeNortel Symposium Web Centre PortalNortel Mobile Voice Client 2050Microsoft Windows MeMicrosoft IeMicrosoft Windows XpAvaya Definity One Media Server

Weakness Type

NVD-CWE-Other

References