← Database

CVE-2004-0841

MEDIUM CVSS: 5.0 Published: 2004-12-23 Modified: 2026-06-16

Description

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

Affected Platforms

Avaya S3400Microsoft IeAvaya Definity One Media ServerAvaya S8100Avaya Modular Messaging Message Storage ServerMicrosoft Internet ExplorerAvaya Ip600 Media Servers

Weakness Type

NVD-CWE-Other

References