CVE-2004-2291

Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-09-16

Affected products

• Ie (Microsoft)
• Internet Explorer (Microsoft)

References

• http://www.securityfocus.com/archive/1/348688
• http://www.securityfocus.com/bid/9335