CVE-2004-0841

No fix known EPSS 49%

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

Published 2004-09-14 · CVE record · OSV

Products: avaya ip600_media_servers, microsoft ie, microsoft internet_explorer, avaya modular_messaging_message_storage_server