CoreCVE
Back

HIGH

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help

Published Oct 26, 2004

Description

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Oct 26, 2004
Updated Aug 8, 2024
Reserved Oct 25, 2004
Link CVE-2004-0985
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2004-0985
Red Hat
Severity n/a
Public date n/a
Links CVE-2004-0985
ENISA EUVD
Assigner mitre
Published Oct 26, 2004
Updated Aug 8, 2024
Exploited since n/a
Link EUVD-2004-0983
EUVD-2004-0983