CVE-2004-0839: avaya modular_messaging_message_storage_server

CVSS: 5.0v2.0MediumModified

Published 14-09-2004Last modified 08-08-2024

Vulnerability summary

CVE-2004-0839 is a medium (CVSS 5.0) vulnerability in avaya modular_messaging_message_storage_server. EPSS estimates a 33.99% chance of exploitation in the next 30 days, higher than 98.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

37/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

33.99%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Timeline

14-09-2004
PublishedVulnerability first disclosed.
08-08-2024
Last modifiedVulnerability information updated.

Description

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

33.99%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 33.99% on 20-09-2026

20-09-202620-10-2026

EPSS score

33.99%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Microsoft3 products

ie6.0:sp1 | 6.0:sp2
internet_explorer5.01 | 5.01:sp1 | 5.01:sp2 | 5.01:sp3 | 5.01:sp4 | 5.5 | 5.5:sp1 | 5.5:sp2 | 6.0
windows_2003_serverenterprise | enterprise_64-bit | r2 | standard | web

Avaya1 product