CVE-2004-1331

Опубликовано: 16 нояб. 2004

Источник: nvd

CVSS2: 2.6

EPSS Средний

Описание

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html
Vendor Advisory
http://secunia.com/advisories/13203/
Vendor Advisory
http://securityreason.com/securityalert/3220
http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php
Vendor Advisory
http://www.kb.cert.org/vuls/id/743974
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11686
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18181
http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html
Vendor Advisory
http://secunia.com/advisories/13203/
Vendor Advisory
http://securityreason.com/securityalert/3220
http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php
Vendor Advisory
http://www.kb.cert.org/vuls/id/743974
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/11686
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18181

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.20802

Средний

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-p882-x8vh-j9c7

github

почти 4 года назад