CVE-2004-1173

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Dec 31, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-11745.0direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file ha CVE-2004-11757.5fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell met CVE-2004-11767.5Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly CVE-2004-11774.3Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script CVE-2004-11792.1The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack CVE-2004-11805.0Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of s CVE-2004-11814.6htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files.CVE-2004-11827.5hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended ac CVE-2004-11835.1Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application cra CVE-2004-11844.6The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.CVE-2004-11857.5Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames CVE-2004-11865.0Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash).