NetSight
IP …
medium5.0

CVE-2004-0839

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses …

Impact

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

Affected products

VendorProductAffected versions
AvayaIp600 Media Servers
All versions
MicrosoftIe
Version 6.0
MicrosoftInternet Explorer
Versions 5.0.1, 5.5, 6.0
AvayaDefinity One Media Server
All versions
AvayaS3400
All versions
AvayaS8100
All versions
NortelIp Softphone 2050
All versions
NortelMobile Voice Client 2050
All versions
NortelOptivity Telephony Manager
All versions
NortelSymposium Web Centre Portal
All versions
NortelSymposium Web Client
All versions
AvayaModular Messaging Message Storage Server
Versions 1.1, 2.0

References