VULNERABILITY INTELLIGENCE
CVE-2004-0841
CVSS score5 MEDIUM
EPSS probability48.73%
CISA KEVNot currently listed
Published2004-12-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — US Government Resource
- cve@mitre.org
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Exploit, Patch, Vendor Advisory
- cve@mitre.org — US Government Resource
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org