CVE-2004-0841

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka HijackClick 3 and the Script in Image Tag File Download Vulnerability.

Affected Software

Name	Vendor	Start Version	End Version
Ip600_media_servers	Avaya	*	*
Ie	Microsoft	6.0-sp1 (including)	6.0-sp1 (including)
Internet_explorer	Microsoft	5.0.1 (including)	5.0.1 (including)
Internet_explorer	Microsoft	5.0.1-sp1 (including)	5.0.1-sp1 (including)
Internet_explorer	Microsoft	5.0.1-sp2 (including)	5.0.1-sp2 (including)
Internet_explorer	Microsoft	5.0.1-sp3 (including)	5.0.1-sp3 (including)
Internet_explorer	Microsoft	5.0.1-sp4 (including)	5.0.1-sp4 (including)
Internet_explorer	Microsoft	5.5 (including)	5.5 (including)
Internet_explorer	Microsoft	5.5-sp1 (including)	5.5-sp1 (including)
Internet_explorer	Microsoft	5.5-sp2 (including)	5.5-sp2 (including)
Internet_explorer	Microsoft	6.0 (including)	6.0 (including)
Definity_one_media_server	Avaya	*	*
S3400	Avaya	*	*
S8100	Avaya	*	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2004-0841
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References