QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-0216

Back to search

CVE-2004-0216

Published: Oct 16, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.

VendorProductVersions

n/a

n/a

affected
n/a

References

oval:org.mitre.oval:def:5316
vdb-entry
signature
x_refsource_OVAL
VU#637760
third-party-advisory
x_refsource_CERT-VN
MS04-038
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:7865
vdb-entry
signature
x_refsource_OVAL
TA04-293A
third-party-advisory
x_refsource_CERT
ie-ms04038-patch(17651)
vdb-entry
x_refsource_XF
oval:org.mitre.oval:def:7717
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:6100
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:6600
vdb-entry
signature
x_refsource_OVAL
oval:org.mitre.oval:def:5329
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now