CVE-2004-1173: Undefined Security Weakness

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model DOM methods in the DHTML Dynamic HTML DHTML Editing Component DEC and Javascript that calls showModalDialog...

VulnCheck KEV: CVE-2004-0841

Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."...

VulnCheck KEV: CVE-2004-0839

Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder...

HijackClick 3

Note: This vulnerability as well as several more can be found at http://www.greyhats.cjb.net HijackClick 3!!! Took the name from Liu Die Yu : Tested IEXPLORE.EXE file version 6.0.2800.1106 MSHTML.DLL file version 6.00.2800.1400 Microsoft Windows XP sp2 Discussion The HijackClick series have been...

Microsoft Outlook Express - Window Opener

Microsoft Outlook Express - Window Opener Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this vulnerability and we can still cause a drag and drop event. Well anyway, to the people that don't design easily exploited software, simply click the link on the...

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking

Microsoft Internet Explorer 5.0.1 - Popup.show Mouse Event Hijacking source: https://www.securityfocus.com/bid/10690/info A vulnerability exists in Microsoft Internet Explorer that may permit a malicious Web page to hijack mouse events. This could potentially be exploited to trick an unsuspecting...

CVE-2004-0479

The vulnerability CVE-2004-0479 affects Internet Explorer 6. JavaScript that creates a new popup window and disables the imagetoolbar via a META tag can trigger a null dereference, leading to a remote denial of service (crash). The description does not provide exploit status or concrete remediati...

Microsoft Internet Explorer 56 - Browser Popup Window Object Type Validation

Microsoft Internet Explorer 56 - Browser Popup Window Object Type Validation source: https://www.securityfocus.com/bid/8556/info Internet Explorer does not properly handle object types, when rendering malicious popup windows. This may result in the possibility of the execution of malicious...

Microsoft Internet Explorer 5/6 - Browser Popup Window Object Type Validation

source: https://www.securityfocus.com/bid/8556/info Internet Explorer does not properly handle object types, when rendering malicious popup windows. This may result in the possibility of the execution of malicious software. The problem occurs when Internet Explorer receives a response from the...

CVE-2002-0077: Undefined Security Weakness

Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable...

Internet Explorer Pop-Up OBJECT Tag Bug

Internet Explorer Pop-Up OBJECT Tag Bug Class: Failure to Handle Exceptional Conditions Remote: Yes Local: Yes Found: January 10, 2001 Severity: Moderate Vulnerable: IE 6.0.2600.0000 + Windows 2000 Update Versions: Q312461; Q240308;Q313675 Discussion: The PopUp object allows the insertion of...