OSVDB ID: 7891

Title: Microsoft Windows IE window.moveBy Function Pointer Hijack (HijackClickV2)

Info

Disclosure
Nov 25, 2003

Discovery
Unknown

Dates

Exploit
Nov 25, 2003

Solution
Unknown

Description

 Windows contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the OS allowing mouse events to control certain window operations via method caching. This may allow an attacker to include a file from a remote host that could be executed via another vulnerability.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation

Windows

 2000 SP3
2000 SP4
XP SP1
XP 64-Bit SP1
XP 64-Bit 2003
2000 SP2
NT 4.0 Workstation SP6a
NT 4.0 Server SP6a
NT 4.0 Server Terminal Server Edition SP6

Windows Server

 2003
2003 64-Bit Edition

References

Credit
  • Liu Die Yu - liudieyuinchinayahoo.com.cn - Personal Page


Direct URL: http://osvdb.org/7891