CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 10.0. Its EPSS score suggests a 48.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2004-0216
Severity
HIGH
CVSS
10
EPSS
48.67%
Original NVD Description
Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.