CWE Code: 94
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Improper Control of Generation of Code ('Code Injection')
Summary: microsoft internet explorer 7 and earlier allows remote attackers to bypass the "file download - security warning" dialog box and download arbitrary .exe files by placing a '?' (question mark) followed by a non-.exe filename after the .exe filename, as demonstrated by (1) .txt, (2) .cda, (3) .log, (4) .dif, (5) .sol, (6) .htt, (7) .itpc, (8) .itms, (9) .dvr-ms, (10) .dib, (11) .asf, (12) .tif, and unspecified other extensions, a different issue than cve-2004-1331.  note: this issue might not cross privilege boundaries, although it does bypass an intended protection mechanism.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2007-10-14
Last Modified Date: 2018-10-15