medium5.0Public exploit code

CVE-2004-0841

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking2004-07-12 · remote · windows · Verified

Impact

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

Affected products

Vendor	Product	Affected versions
Avaya	Ip600 Media Servers	All versions
Microsoft	Ie	Version 6.0
Microsoft	Internet Explorer	Versions 5.0.1, 5.5, 6.0
Avaya	Definity One Media Server	All versions
Avaya	S3400	All versions
Avaya	S8100	All versions
Avaya	Modular Messaging Message Storage Server	Versions 1.1, 2.0

Public exploit code

Impact

Affected products

References