CVE-2004-2090 in Internet Explorer

Summary

Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 05/19/2005
• Disclosure: 02/07/2004
• Moderation: VulDB entry created
• Entries: VDB-507 (1)
• CPE: ready
• CWE: Unknown
• Exploit: Download
• CVSS: 4.3
• EPSS: 0.39409
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2090
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2090
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2090/