{"id":"CVE-2004-2090","aliases":["EUVD-2004-2082","GHSA-874q-x67w-8ccx"],"status":"published","title":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence...","description":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.16018,"percentile":0.96935,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-02-07T05:00:00Z","modified":"2026-06-16T22:08:58Z","exploits":[{"source":"exploitdb","id":"EDB-23668","title":"Microsoft Internet Explorer 5.0.1 - LoadPicture File Enumeration","type":"remote","platform":"windows","date":"2004-02-07","verified":true,"url":"https://www.exploit-db.com/exploits/23668"}],"products":[{"vendor":"microsoft","product":"ie"},{"vendor":"microsoft","product":"internet_explorer"}],"references":[{"url":"http://www.securityfocus.com/bid/9611","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15078","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/10820","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2090"},{"url":"https://github.com/advisories/GHSA-874q-x67w-8ccx"}],"sources":{"cve":[{"id":"CVE-2004-2090","description":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.","status":"published","published":"2005-05-19T04:00:00Z","modified":"2024-08-08T01:15:01.449Z","updated_at":"2026-11-02T14:34:53.357376Z"}],"euvd":[{"id":"EUVD-2004-2082","description":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.","status":"published","published":"2005-05-19T04:00:00Z","modified":"2024-08-08T01:15:01Z","updated_at":"2026-11-03T01:15:11.805898Z"}],"ghsa":[{"id":"GHSA-874q-x67w-8ccx","title":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence...","description":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.","status":"published","published":"2022-04-29T03:00:46Z","modified":"2023-01-30T05:04:01Z","updated_at":"2026-11-02T14:46:57.494982Z"}],"nvd":[{"id":"CVE-2004-2090","description":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.","status":"published","published":"2004-02-07T05:00:00Z","modified":"2026-06-16T22:08:58.667Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:49.729639Z"}]}}