high7.5Public exploit code
CVE-2004-2291
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a s…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer - Remote Application.Shell2004-07-09 · remote · windows · Verified
Impact
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Versions 5.5, 6.0 |