CVE-2004-0979

Severity

46%

Complexity

39%

Confidentiality

106%

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

CVSS 2.0 Base Score 4.6. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:P/A:P).

Overview

Type

Microsoft

First reported 20 years ago

2004-12-31 05:00:00

Last updated 6 years ago

2018-10-12 21:35:00

Affected Software

Microsoft Internet Explorer 6.0

6.0

Microsoft Windows XP Professional Gold

Microsoft windows xp_sp1 embedded

Microsoft Windows XP Service Pack 1 Home Edition

Microsoft windows xp_sp1 media_center

Microsoft Windows XP Service Pack 2 Home Edition

Microsoft windows xp_sp2 media_center

Microsoft windows xp_sp2 tablet_pc

References

VU#630720

Third Party Advisory, US Government Resource

TA04-293A

US Government Resource

MS04-038

ie-dragdrop-security-bypass(17820)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.