CVE-2004-0839

Exp

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

Published: 2004-08-18 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2004-0839 is rated High Exploit Risk (73.1/100): CVSS Medium severity, with high exploitation likelihood (EPSS 45.91%, 98th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). EPSS rose +3.90% over the last day, indicating growing attacker interest. Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2004-0839

EDB-ID Source Kind Published Link
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2004-0839

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-20 42.01% 45.91% +3.90%
2 2025-12-28 38.83% 42.01% +3.18%
3 2025-12-27 38.83%

Full EPSS history (18 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2004-0839

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
10.0 2.9 [email protected]

Weakness enumeration for CVE-2004-0839

Affected software / configurations for CVE-2004-0839

Vendor Product Version Raw CPE
avaya ip600_media_servers cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*
microsoft ie 6.0 cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
microsoft ie 6.0 cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*
microsoft internet_explorer 6.0 cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
avaya definity_one_media_server cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*
avaya s3400 cpe:2.3:h:avaya:s3400:*:*:*:*:*:*:*:*
avaya s8100 cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*
nortel ip_softphone_2050 cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*
nortel mobile_voice_client_2050 cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*
nortel optivity_telephony_manager cpe:2.3:a:nortel:optivity_telephony_manager:*:*:*:*:*:*:*:*
nortel symposium_web_centre_portal cpe:2.3:a:nortel:symposium_web_centre_portal:*:*:*:*:*:*:*:*
nortel symposium_web_client cpe:2.3:a:nortel:symposium_web_client:*:*:*:*:*:*:*:*
avaya modular_messaging_message_storage_server 1.1 cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*
avaya modular_messaging_message_storage_server 2.0 cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*
microsoft windows_2000 cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
microsoft windows_2000 cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
microsoft windows_2000 cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
microsoft windows_2000 cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
microsoft windows_2000 cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoft windows_2003_server enterprise cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*
microsoft windows_2003_server enterprise_64-bit cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*
microsoft windows_2003_server r2 cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*
microsoft windows_2003_server r2 cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*
microsoft windows_2003_server standard cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*
microsoft windows_2003_server web cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*
microsoft windows_98 cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*
microsoft windows_98se cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*
microsoft windows_me cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*
microsoft windows_xp cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

References for CVE-2004-0839

URL Tags
http://marc.info/?l=bugtraq&m=109303291513335&w=2
http://marc.info/?l=bugtraq&m=109336221826652&w=2
http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html Vendor Advisory
http://www.kb.cert.org/vuls/id/526089 Patch Third Party Advisory US Government Resource
http://www.securityfocus.com/bid/10973 Exploit Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA04-293A.html Patch Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
https://exchange.xforce.ibmcloud.com/vulnerabilities/17044
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1563
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2073
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3773
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4152
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6272
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7721
cvelogic Threat Intelligence