Tracker / CVE-2004-0839
CVE-2004-0839
Medium 5.0
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
Affected products and versions
| avaya | definity_one_media_server |
|---|---|
| avaya | ip600_media_servers |
| avaya | modular_messaging_message_storage_server |
| avaya | s3400 |
| avaya | s8100 |
| microsoft | ie |
| microsoft | internet_explorer |
| microsoft | windows_2000 |
| microsoft | windows_2003_server |
| microsoft | windows_98 |
| microsoft | windows_98se |
| microsoft | windows_me |
| microsoft | windows_xp |
| nortel | ip_softphone_2050 |
| nortel | mobile_voice_client_2050 |
| nortel | optivity_telephony_manager |
| nortel | symposium_web_centre_portal |
| nortel | symposium_web_client |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.