| Vulnerability Name: | CCN-16394 | ||||||
| Published: | 2003-08-26 | ||||||
| Updated: | 2003-08-26 | ||||||
| Summary: | Microsoft Internet Explorer could allow a remote attacker to create and overwrite arbitrary files on a victim's computer. A remote attacker could create a malicious Web page that uses the ADODB.Stream object, which would execute arbitrary code on the victim's system, once the file is executed from the local hard disk. An attacker could exploit this vulnerability by hosting the malicious Web page on a Web site or by sending it to a victim as an HTML email. | ||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||
| CVSS v2 Severity: | 7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||
| Vulnerability Consequences: | Gain Access | ||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Tue Aug 26 2003 - 07:55:12 CDT ADODB.Stream object Source: CCN Type: Microsoft Knowledge Base Article - 870669 How to disable the ADODB.Stream object from Internet Explorer Source: CCN Type: BID-10514 Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness Source: XF Type: UNKNOWN ie-adodbstream-code-execution(16394) | ||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
| BACK | |||||||