CVE-2004-0839

Published: Aug 18, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

Affected (46)

Products: Avaya: Definity One Media Server, Ip600 Media Servers, S3400, S8100, Modular Messaging Message Storage Server · Microsoft: Ie, Internet Explorer, Windows 2000, Windows 2003 Server, Windows 98, Windows 98se, Windows Me, Windows Xp · Nortel: Ip Softphone 2050, Mobile Voice Client 2050, Optivity Telephony Manager, Symposium Web Centre Portal, Symposium Web Client

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Avaya Definity One Media Server	All versions
Avaya Ip600 Media Servers	All versions
Avaya S3400	All versions
Avaya S8100	All versions
Microsoft Ie	Version 6.0 sp1
Microsoft Ie	Version 6.0 sp2
Microsoft Internet Explorer	Version 5.0.1
Microsoft Internet Explorer	Version 5.0.1 sp1
Microsoft Internet Explorer	Version 5.0.1 sp2
Microsoft Internet Explorer	Version 5.0.1 sp3
Microsoft Internet Explorer	Version 5.0.1 sp4
Microsoft Internet Explorer	Version 5.5
Microsoft Internet Explorer	Version 5.5 sp1
Microsoft Internet Explorer	Version 5.5 sp2
Microsoft Internet Explorer	Version 6.0

Configuration B

31 vulnerable

Vulnerable Software	Affected Versions
Avaya Modular Messaging Message Storage Server	Version 1.1
Avaya Modular Messaging Message Storage Server	Version 2.0
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	Version enterprise
Microsoft Windows 2003 Server	Version enterprise_64-bit
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version web
Microsoft Windows 98	All versions
Microsoft Windows 98se	All versions
Microsoft Windows Me	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Nortel Ip Softphone 2050	All versions
Nortel Mobile Voice Client 2050	All versions
Nortel Optivity Telephony Manager	All versions
Nortel Symposium Web Centre Portal	All versions
Nortel Symposium Web Client	All versions