CVE-2004-0841
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
- EPSS
- 49% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- avaya:definity_one_media_server
- avaya:ip600_media_servers
- avaya:modular_messaging_message_storage_server
- avaya:s3400
- avaya:s8100
- microsoft:ie
- microsoft:internet_explorer