VULNERABILITY INTELLIGENCE
CVE-2004-2090
CVSS score5 MEDIUM
EPSS probability16.02%
CISA KEVNot currently listed
Published2004-02-07
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.
Primary references
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit, Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108