CVE-2004-0985

Published: Dec 31, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

Affected (1)

Products: Microsoft: Ie

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 6.0 sp2

References (8)

http://marc.info/?l=bugtraq&m=109829111200055&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109830296130857&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=109828076802478&w=2

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17824

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109829111200055&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=109830296130857&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=ntbugtraq&m=109828076802478&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/17824

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.