CVE-2004-0216: Microsoft Ie

High severity, CVSS 10.0. EPSS: 48.7% chance of exploitation in the next 30 days.

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.

Affected products

• Microsoft Ie: version 6 only
• Microsoft Internet Explorer: version 5.01 only; version 5.5 only

Published 2004-11-03. Last modified 2026-06-16.