imPC@ndo IT

Tracker / CVE-2004-0841

CVE-2004-0841

Medium 5.0

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

Affected products and versions

avaya definity_one_media_server
avaya ip600_media_servers
avaya modular_messaging_message_storage_server
avaya s3400
avaya s8100
microsoft ie
microsoft internet_explorer

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References