CVE-2004-0841
Medium
Description
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
SeverityMedium
CVSS5.0
Exploit probability—
Product
Microsoft Internet Explorer
PublishedDec 23, 2004
First seenDec 23, 2004
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft internet_explorer | 5.0.1, 5.5, 6.0 | — |
| avaya ip600_media_servers | No range specified | — |
| microsoft ie | 6.0 | — |
| avaya definity_one_media_server | No range specified | — |
| avaya s3400 | No range specified | — |
| avaya s8100 | No range specified | — |
| avaya modular_messaging_message_storage_server | 1.1, 2.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.