CVE-2004-2090

Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

16.02% chance of exploitation in the next 30 days, 97th percentile

Published

2005-05-19

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/23668

References

• CVE Record
• NVD entry

Related

• CVE-2004-2086
• CVE-2004-2093
• CVE-2004-2082
• CVE-2004-2094
• CVE-2004-2081
• CVE-2004-2096