Vulnerability in Microsoft Ie
CVE-2004-2090
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.
EPSS: 0.160 (96.6th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- Microsoft Internet_explorer — versions 5.0.1, 5.5, 6.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)