CVE-2004-2090

No fix known EPSS 16%

Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.

Published 2005-05-19 · CVE record · OSV

Products: microsoft ie, microsoft internet_explorer