CVE-2004-2307: Medium severity Microsoft Internet Explorer vulnerability
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML tag such as IFRAME or A.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2307?
CVE-2004-2307 has a low severity level as it primarily causes a denial of service resulting in browser crashes.
How do I fix CVE-2004-2307?
To fix CVE-2004-2307, users should upgrade to a more recent version of Internet Explorer or apply the latest security patches provided by Microsoft.
Which versions of Internet Explorer are affected by CVE-2004-2307?
CVE-2004-2307 affects Microsoft Internet Explorer version 6.0.2600 running on Windows XP.
What impact does CVE-2004-2307 have on users?
CVE-2004-2307 allows attackers to crash the browser, disrupting the user’s session and potentially leading to further exploitation.
Are all versions of Windows XP vulnerable to CVE-2004-2307?
Only certain versions of Windows XP, specifically those running Internet Explorer 6.0.2600, are vulnerable to CVE-2004-2307.