Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
Affected Platforms
Microsoft Windows 98Microsoft Internet ExplorerMicrosoft Windows 98SeMicrosoft Windows MeMicrosoft IeMicrosoft Windows XpMicrosoft Windows 2000Microsoft Windows 2003 Server