CVE-2004-2291: High severity Microsoft ie vulnerability
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2291?
CVE-2004-2291 has a high severity rating due to its potential to allow remote code execution.
How do I fix CVE-2004-2291?
To fix CVE-2004-2291, update Microsoft Internet Explorer to the latest version or apply the relevant security patches provided by Microsoft.
Which versions of Internet Explorer are affected by CVE-2004-2291?
CVE-2004-2291 affects Microsoft Internet Explorer 5.5 and 6.0, including all service packs and preview versions of 5.5.
Can CVE-2004-2291 be exploited through email?
Yes, CVE-2004-2291 can be exploited through embedded scripts in malicious emails that trigger the vulnerability when opened.
Is there a workaround for CVE-2004-2291?
A possible workaround for CVE-2004-2291 is to disable active scripting in Internet Explorer until a patch can be applied.