CVE-2004-0979

Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

• http://www.kb.cert.org/vuls/id/630720Third Party Advisory, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA04-293A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17820
• http://www.kb.cert.org/vuls/id/630720Third Party Advisory, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA04-293A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17820

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0973Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-0974The netatalk package in Trustix Secure Linux 1.5 through 2.1…
• CVE-2004-0975The der_chop script in the openssl package in Trustix Secure…
• CVE-2004-0976Multiple scripts in the perl package in Trustix Secure Linux…
• CVE-2004-0977The make_oidjoins_check script in PostgreSQL 7.4.5 and earli…
• CVE-2004-0978Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) Ac…
• CVE-2004-0980Format string vulnerability in ez-ipupdate.c for ez-ipupdate…
• CVE-2004-0981Buffer overflow in the EXIF parsing routine in ImageMagick b…
• CVE-2004-0982Buffer overflow in the getauthfromURL function in httpget.c …
• CVE-2004-0983The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.…
• CVE-2004-0984Unknown vulnerability in the dotlock implementation in mailu…
• CVE-2004-0985Internet Explorer 6.x on Windows XP SP2 allows remote attack…