Description
Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.
References (4)
Core 4
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109830296130857&w=2
Mailing List mailing-list
x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=109828076802478&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17824
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109829111200055&w=2
Scores
EPSS
0.2024
EPSS Percentile
97.2%
Details
Status
published
Products (1)
microsoft/ie
6.0 sp2
Published
Dec 31, 2004
Tracked Since
Feb 18, 2026