Description
Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027.
References
- VU#413886 third-party-advisory
- 20030910 MSIE->HijackClick: 1+1=2 mailing-list
- oval:org.mitre.oval:def:370 vdb-entry signature
- oval:org.mitre.oval:def:371 vdb-entry signature
- MS03-048 vendor-advisory
- oval:org.mitre.oval:def:588 vdb-entry signature
- 20030911 LiuDieYu's missing files are here. mailing-list
- oval:org.mitre.oval:def:733 vdb-entry signature
- oval:org.mitre.oval:def:369 vdb-entry signature
- oval:org.mitre.oval:def:368 vdb-entry signature
- 10192 third-party-advisory
- oval:org.mitre.oval:def:372 vdb-entry signature
- 1006036 vdb-entry