CVE-2004-0841
5.0
CVSS v2.0 Base Score
52.37%
MEDIUM RiskEPSS (98th percentile)
NVD-CWE-Other
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
Published: 12/23/2004
Modified: 4/16/2026
Vulnerability Summary
CVSS v2 Score
5
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS Score (Exploitation Probability)
52.37%MEDIUM Exploitation Risk
98th percentile
This vulnerability has a 52.37% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.
CWE Classification
NVD-CWE-Other