Unscored CVE-2004-0475 EUVD-2004-0474GHSA-624v-gqcq-xp7r

The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double b…

Published May 20, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this bug may overlap CVE-2003-1041.

References

10348 vdb-entry
20040513 Showhelp() local CHM file execution mailing-list
ie-showhelp-chm-execution(16147) vdb-entry