CVE-2004-0841 in Internet Explorer
Summary
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
09/08/2004
Disclosure
12/23/2004
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 285 | Microsoft Internet Explorer privileges management | 269 | Proof-of-Concept | Official fix | CVE-2004-0841 |