CVE-2004-1686

EPSS 10.7%
Published 15.09.2004 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin.

Affected products Warnungen 0 Metrics 2 CWE 0 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Ie Version6.0 Updatesp2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	10.7%	0.926

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://marc.info/?l=bugtraq&m=109539520310153&w=2

http://www.securityfocus.com/bid/11200

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/20617

https://nvd.nist.gov/vuln/detail/CVE-2004-1686

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-1686

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-1686

EUVD