CVE-2004-1166
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 39.2%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 39.16% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- microsoft/ie · microsoft/internet explorer
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=110253463305359&w=2
- http://secunia.com/advisories/13404Vendor Advisory
- http://secunia.com/advisories/29346Vendor Advisory
- http://securitytracker.com/id?1012444
- http://www.osvdb.org/12299
- http://www.rapid7.com/advisories/R7-0032.jsp
- http://www.securityfocus.com/archive/1/489500/100/0/threaded
- http://www.securityfocus.com/bid/11826Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/28208
- http://www.vupen.com/english/advisories/2006/3212Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0870Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18384
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462
- http://marc.info/?l=bugtraq&m=110253463305359&w=2
- http://secunia.com/advisories/13404Vendor Advisory
- http://secunia.com/advisories/29346Vendor Advisory
- http://securitytracker.com/id?1012444
- http://www.osvdb.org/12299
- http://www.rapid7.com/advisories/R7-0032.jsp
- http://www.securityfocus.com/archive/1/489500/100/0/threaded
- http://www.securityfocus.com/bid/11826Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/28208
- http://www.vupen.com/english/advisories/2006/3212Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0870Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18384
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.