Exploitation Summary
CVE-2004-0841 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Paul.
AI-analyzed exploit summary This is a writeup describing a mouse event hijacking vulnerability in Microsoft Internet Explorer. It includes a proof-of-concept snippet demonstrating how a malicious webpage could trick users into performing unintended actions, such as approving dialogs.
Description
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
Exploits (1)
This is a writeup describing a mouse event hijacking vulnerability in Microsoft Internet Explorer. It includes a proof-of-concept snippet demonstrating how a malicious webpage could trick users into performing unintended actions, such as approving dialogs.