CVE-2004-0979 json
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disa…
published 2004-10-21 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0977
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.5%
- EPSS 7.5% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
Exploit prediction
7.48% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
docs.microsoft.com
/en-us/security-updates/securitybulletins/2004/ms04-038
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/17820
vdb-entry
-
us-cert.gov
/cas/techalerts/TA04-293A.html
third-party-advisory, us-government-resource
-
kb.cert.org
/vuls/id/630720
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2004-0979
- NVD CVE-2004-0979
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.