CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Microsoft. Its EPSS score suggests a 39.2% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2004-1166
Severity
HIGH
CVSS
7.5
EPSS
39.16%
Microsoft
Original NVD Description
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.