CVE-2004-0978

high · 10

Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.

CVSS

38.3%

EPSS (exploit prob.)

98th

EPSS percentile

2005-02-09

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	5.01
microsoft	internet_explorer	5.01
microsoft	windows_2000	all versions
microsoft	windows_2000	all versions
microsoft	internet_explorer	5.5
microsoft	windows_me	all versions
microsoft	internet_explorer	6
microsoft	windows_server_2003	all versions
microsoft	windows_server_2003	all versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions
microsoft	internet_explorer	6
microsoft	windows_2000	all versions
microsoft	windows_2000	all versions
microsoft	windows_98se	all versions
microsoft	windows_me	all versions
microsoft	windows_nt	4.0
microsoft	windows_nt	4.0
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0978