Description
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
References
- oval:org.mitre.oval:def:7721 vdb-entry signature
- 10973 vdb-entry
- 20040824 What A Drag! -revisited- mailing-list
- MS04-038 vendor-advisory
- oval:org.mitre.oval:def:6272 vdb-entry signature
- 20040818 What A Drag II XP SP2 mailing-list
- oval:org.mitre.oval:def:2073 vdb-entry signature
- 20040818 What A Drag II XP SP2 mailing-list
- TA04-293A third-party-advisory
- oval:org.mitre.oval:def:4152 vdb-entry signature
- oval:org.mitre.oval:def:3773 vdb-entry signature
- VU#526089 third-party-advisory
- ie-dragdrop-code-execution(17044) vdb-entry
- oval:org.mitre.oval:def:1563 vdb-entry signature