VULNERABILITY INTELLIGENCE

CVE-2004-2291

CVSS score7.5 HIGH

EPSS probability10.88%

CISA KEVNot currently listed

Published2004-12-31

Last modified2026-06-16

Description

Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.