CVE-2004-0839
No fix known EPSS 34%
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
Products: avaya ip600_media_servers, microsoft ie, microsoft internet_explorer, nortel ip_softphone_2050, nortel mobile_voice_client_2050, nortel optivity_telephony_manager, nortel symposium_web_centre_portal, nortel symposium_web_client, avaya modular_messaging_message_storage_server, microsoft windows_2000, microsoft windows_2003_server, microsoft windows_98, microsoft windows_98se, microsoft windows_me, microsoft windows_xp