Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2004-0979

Overview

Vulnerability Score 4.6 4.6
CVE Id CVE-2004-0979
Last Modified 10 Sep 2008 03:28:26
Published 31 Dec 2004 12:00:00
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector LOCAL
Access Complexity LOW
Authentication NONE

CVE-2004-0979

Summary

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

Vulnerable Systems

Operating System

  • Microsoft Windows Xp

Application

  • Microsoft Ie 6.0


References

CERT - TA04-293A

CERT-VN - VU#630720

XF - ie-dragdrop-security-bypass(17820)

MS - MS04-038


Last Updated: 27 May 2016 10:38:50