VDB

GCVE-110-CERTCC-2004-526089

GCVE-110-CERTCC-2004-526089
Advisory Published
Vulnetix · Advisory published August 18, 2004
Microsoft Internet Explorer (IE) treats arbitrary files as images during drag and drop mouse operations. This could allow an attacker to trick a user into copying a file to a location where it may be executed, such as the Windows StartUp folder.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact7population20exploitation13widely_known20score_current15.96ease_of_exploitation8

Aliases

CVE-2004-0839

Transitive aliases

GHSA-M47G-CQXQ-6VWRGHSA-m47g-cqxq-6vwrGSD-2004-0839EUVD-2004-0837

References

Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
advisory
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
url
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
url
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
url
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
url
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
url
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
url
Microsoft Internet Explorer treats arbitrary files as images for drag and drop operations
advisory

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›