CVE-2004-0979

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

History

20 Nov 2024, 23:49

Type Values Removed Values Added
References () http://www.kb.cert.org/vuls/id/630720 - Third Party Advisory, US Government Resource () http://www.kb.cert.org/vuls/id/630720 - Third Party Advisory, US Government Resource
References () http://www.us-cert.gov/cas/techalerts/TA04-293A.html - US Government Resource () http://www.us-cert.gov/cas/techalerts/TA04-293A.html - US Government Resource
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:49


NVD link : CVE-2004-0979

Mitre link : CVE-2004-0979

CVE.ORG link : CVE-2004-0979


JSON object : View

Products Affected

microsoft

  • internet_explorer
  • windows_xp
  • ie