CVE-2004-1376: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 8.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.

Affected products

• Microsoft Internet Explorer: version 5.01 only; version 5.5 only; version 6.0 only

Published 2004-12-30. Last modified 2026-06-16.