cve/2004/CVE-2004-0841.md

CVE-2004-0841

Description

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

POC

Reference

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038

Github

No PoCs found on GitHub currently.