What’s Vulnerable › Vulnerabilities

CVE-2004-0479

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 25.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-05-20 · updated 2026-06-16

Description

Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.

Affected products

• Microsoft Ie: 6-windows_server_2003_sp1

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html
• http://marc.info/?l=vuln-dev&m=108457938412310&w=2
• http://marc.info/?l=vuln-dev&m=108476938219070&w=2
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html
• http://marc.info/?l=vuln-dev&m=108457938412310&w=2
• http://marc.info/?l=vuln-dev&m=108476938219070&w=2

Get alerted when CVE-2004-0479 or the next vulnerability affects your stack