CVE-2004-0985: Critical severity microsoft ie vulnerability

Published Oct 26, 2004

Updated

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

Affected Software

1 affected component

Microsoft ie=6.0-sp2

Event History

Oct 26, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0985?

CVE-2004-0985 is classified with a high severity level due to its potential for remote code execution.

How do I fix CVE-2004-0985?

To mitigate CVE-2004-0985, users should upgrade to a newer version of Internet Explorer or apply the latest security patches provided by Microsoft.

What are the affected systems for CVE-2004-0985?

CVE-2004-0985 specifically affects Internet Explorer 6.0 with Service Pack 2 on Windows XP.

What type of attack is possible with CVE-2004-0985?

CVE-2004-0985 allows remote attackers to execute arbitrary code through specially crafted documents.

When was CVE-2004-0985 reported?

CVE-2004-0985 was reported in 2004, highlighting vulnerabilities in older Internet Explorer versions.