CVE-2004-0841
- State
- Published
- Severity
- Not scored
- Published
- Sep 14, 2004
- Updated
- Aug 8, 2024
- Reserved
- Sep 8, 2004
Description
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- VU#413886third-party-advisory
- 1010679vdb-entry
- oval:org.mitre.oval:def:2611vdb-entrysignature
- MS04-038vendor-advisory
- oval:org.mitre.oval:def:8077vdb-entrysignature
- 12048third-party-advisory
- ie-popupshow-perform-actions(16675)vdb-entry
- TA04-293Athird-party-advisory
- oval:org.mitre.oval:def:4363vdb-entrysignature
- 10690vdb-entry
- 7774vdb-entry
- oval:org.mitre.oval:def:5620vdb-entrysignature
- oval:org.mitre.oval:def:6031vdb-entrysignature
- 20040711 HijackClick 3mailing-list
- oval:org.mitre.oval:def:6048vdb-entrysignature
- 20040712 Re: HijackClick 3mailing-list
- 20040712 Brand New Hole: Internet Explorer: HijackClick 3mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.