GCVE-110-CERTCC-2004-743974

Advisory Published

Vulnetix · Advisory published November 17, 2004

Microsoft Internet Explorer contains a vulnerability in the way that it presents a Save As dialog. By invoking the SaveAs command with execCommand, an attacker could display a dialog that could trick a user into saving arbitrary content.

Download JSON Open in Console

Risk Scores

certcc-cam

impact5population20exploitation0widely_known20score_current1.6875ease_of_exploitation2

References

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

advisory

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

url

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

url

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

url

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

url

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

url

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

advisory

Microsoft Internet Explorer execCommand() method SaveAs command uses misleading "Save HTML Document" dialog

advisory

Browse GCVE Records

73,834 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON