Microsoft Internet Explorer allows mouse events to manipulate window objects and perform "drag and drop" operations

🗓️ 02 Feb 2004 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 52 Views

Microsoft Internet Explorer DHTML mouse events allow file manipulation and drag and drop exploits.

Source	Link
securityfocus	www.securityfocus.com/archive/1/336992
securityfocus	www.securityfocus.com/archive/1/345626
safecenter	www.safecenter.net/UMBRELLAWEBV4/HijackClick/HijackClick-Content.HTM
safecenter	www.safecenter.net/UMBRELLAWEBV4/HijackClickV2/HijackClickV2-Content.htm
freehost07	www.freehost07.websamba.com/greyhats/hijackclick3.htm
microsoft	www.microsoft.com/technet/security/bulletin/MS03-048.asp
microsoft	www.microsoft.com/technet/security/bulletin/MS04-004.asp
msdn	www.msdn.microsoft.com/workshop/author/dhtml/reference/dhtml_reference_entry.asp
msdn	www.msdn.microsoft.com/workshop/author/dhtml/reference/events.asp
support	www.support.microsoft.com/

28 Oct 2004 18:37Current

7.4High risk

Vulners AI Score7.4

microsoft internet explorer dhtml mouse events file manipulation drag and drop arbitrary files local file system hijackclick security patch ms03-048 method caching.