CVE-2004-2290

CVE-2004-2290 describes a critical arbitrary code execution vulnerability affecting Microsoft Windows XP Explorer. Attackers can exploit this by crafting a self-executing folder containing HTML and script that references an executable within the same folder, which then automatically runs when a user accesses it. With a CVSS score of 7.5, this vulnerability presents a high risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability garners significant community discussion, with 10 mentions, indicating ongoing interest despite its age.