CVE-2004-0839
No CVSS score yet. EPSS 34% chance of exploitation in the next 30 days.
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
- EPSS
- 34% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- avaya:definity_one_media_server
- avaya:ip600_media_servers
- avaya:modular_messaging_message_storage_server
- avaya:s3400
- avaya:s8100
- microsoft:ie
- microsoft:internet_explorer
- microsoft:windows_2000
- microsoft:windows_2003_server
- microsoft:windows_98
- microsoft:windows_98se
- microsoft:windows_me
- microsoft:windows_xp
- nortel:ip_softphone_2050
- nortel:mobile_voice_client_2050
- nortel:optivity_telephony_manager
- nortel:symposium_web_centre_portal
- nortel:symposium_web_client