CVE-2004-0979

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.kb.cert.org/vuls/id/630720	Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-293A.html	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
https://exchange.xforce.ibmcloud.com/vulnerabilities/17820
http://www.kb.cert.org/vuls/id/630720	Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-293A.html	US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
https://exchange.xforce.ibmcloud.com/vulnerabilities/17820

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:ie:6.0:sp1::::::
	cpe:2.3:a:microsoft:ie:6.0:sp2::::::
	cpe:2.3:a:microsoft:internet_explorer:6.0:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:microsoft:windows_xp:::64-bit:::::*
	cpe:2.3:o:microsoft:windows_xp:::embedded:::::*
	cpe:2.3:o:microsoft:windows_xp:::home:::::*
	cpe:2.3:o:microsoft:windows_xp:::media_center:::::*
	cpe:2.3:o:microsoft:windows_xp::gold:professional:::::
	cpe:2.3:o:microsoft:windows_xp::sp1:64-bit:::::
	cpe:2.3:o:microsoft:windows_xp::sp1:embedded:::::
	cpe:2.3:o:microsoft:windows_xp::sp1:home:::::
	cpe:2.3:o:microsoft:windows_xp::sp1:media_center:::::
	cpe:2.3:o:microsoft:windows_xp::sp2:home:::::
	cpe:2.3:o:microsoft:windows_xp::sp2:media_center:::::
	cpe:2.3:o:microsoft:windows_xp::sp2:tablet_pc:::::

History

20 Nov 2024, 23:49

Type	Values Removed	Values Added
References	~~() http://www.kb.cert.org/vuls/id/630720 - Third Party Advisory, US Government Resource~~	() http://www.kb.cert.org/vuls/id/630720 - Third Party Advisory, US Government Resource
References	~~() http://www.us-cert.gov/cas/techalerts/TA04-293A.html - US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA04-293A.html - US Government Resource
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/17820 -

Information

Published : 2004-12-31 05:00

Updated : 2025-04-03 01:03

NVD link : CVE-2004-0979

Mitre link : CVE-2004-0979

CVE.ORG link : CVE-2004-0979

JSON object : View

Products Affected

microsoft

ie
windows_xp
internet_explorer

CWE

NVD-CWE-Other

{"id": "CVE-2004-0979", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-12-31T05:00:00.000", "references": [{"url": "http://www.kb.cert.org/vuls/id/630720", "tags": ["Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA04-293A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17820", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/630720", "tags": ["Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA04-293A.html", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17820", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Internet Explorer on Windows XP does not properly modify the \"Drag and Drop or copy and paste files\" setting when the user sets it to \"Disable\" or \"Prompt,\" which may enable security-sensitive operations that are inconsistent with the user's intended configuration."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"}, {"criteria": "cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A19F6133-25D1-44A5-B6B9-354703436783"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "91D6D065-A28D-49DA-B7F4-38421FF86498"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC176BB0-1655-4BEA-A841-C4158167CC9B"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "403945FA-8676-4D98-B903-48452B46F48F"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A05337E-18A5-4939-85A0-69583D9B5AD9"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"}, {"criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB2BE2DE-7B06-47ED-A674-15D45448F357"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

4.6 /10