VulnerabilityModified
CVE-2004-2291
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
HIGH 7.5EPSS 10.9%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.9%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 10.88% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/ie · microsoft/internet explorer
- Source
- cve@mitre.org
References
- http://www.securityfocus.com/archive/1/348688Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/9335Exploit
- http://www.securityfocus.com/archive/1/348688Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/9335Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.