CVE-2004-1331: Microsoft Ie

Low severity, CVSS 2.6. EPSS: 19.5% chance of exploitation in the next 30 days.

The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 6.0 only

Published 2004-11-16. Last modified 2026-06-16.