Description
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking EDB-24266 · remote · Jul 12, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VU#413886 third-party-advisory
- 1010679 vdb-entry
- oval:org.mitre.oval:def:2611 vdb-entry signature
- MS04-038 vendor-advisory
- oval:org.mitre.oval:def:8077 vdb-entry signature
- 12048 third-party-advisory
- ie-popupshow-perform-actions(16675) vdb-entry
- TA04-293A third-party-advisory
- oval:org.mitre.oval:def:4363 vdb-entry signature
- 10690 vdb-entry
- 7774 vdb-entry
- oval:org.mitre.oval:def:5620 vdb-entry signature
- oval:org.mitre.oval:def:6031 vdb-entry signature
- 20040711 HijackClick 3 mailing-list
- oval:org.mitre.oval:def:6048 vdb-entry signature
- 20040712 Re: HijackClick 3 mailing-list
- 20040712 Brand New Hole: Internet Explorer: HijackClick 3 mailing-list