← Database

CVE-2004-2090

MEDIUM CVSS: 5.0 Published: 2004-02-07 Modified: 2026-06-16

Description

Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.

Affected Platforms

Microsoft IeMicrosoft Internet Explorer

Weakness Type

NVD-CWE-Other

References