CVE-2004-0549

MITRE CVE Reference: CVE-2004-0549
Description: The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.

Usage

Targetted asset: Microsoft Internet Explorer

Exploit kits using this vulnerability/ Exploit kits utilisant cette vulnérabilité:

• Exploit kits: Incognito

Botnets using this vulnerability to function/propagate:

• Botnets:

Campaigns using this vulnerability:

• Campaigns:

Packages includingthis vulnerability:

• Packages:

Publications

MITRE CVE LICENSE: The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use Common Vulnerabilities and Exposures (CVE®) for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE’s copyright designation and this license in any such copy. MITRE CVE®, TERMS OF USE: [1]