Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2004-2291
cve-2004-2291
microsoft
windows
internet explorer
remote code execution
embedded script
shell helper objects
shortcut
link
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.264 Low
EPSS
Percentile
96.8%
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
Affected configurations
Node
microsoftieMatch6.0sp1
ORmicrosoftinternet_explorerMatch5.5
ORmicrosoftinternet_explorerMatch5.5preview
ORmicrosoftinternet_explorerMatch5.5sp1
ORmicrosoftinternet_explorerMatch5.5sp2
ORmicrosoftinternet_explorerMatch6.0
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.264 Low
EPSS
Percentile
96.8%
Related for CVE-2004-2291