CVE-2004-0526

Internet Explorer - XSS

Title source: llm
STIX 2.1

Description

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

Exploits (1)

exploitdb WRITEUP VERIFIED
by http-equiv · textremotewindows
https://www.exploit-db.com/exploits/24102

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=108422905510713&w=2
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10308
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html

Scores

EPSS 0.4959
EPSS Percentile 97.8%

Details

Status published
Products (20)
microsoft/ie 6.0 sp1
microsoft/internet_explorer 5.0
microsoft/internet_explorer 5.0.1 (5 CPE variants)
microsoft/internet_explorer 5.5 (3 CPE variants)
microsoft/internet_explorer 6.0
microsoft/outlook 97
microsoft/outlook 98
microsoft/outlook 2000 (4 CPE variants)
microsoft/outlook 2002 (4 CPE variants)
microsoft/outlook 2003
... and 10 more
Published Aug 06, 2004
Tracked Since Feb 18, 2026