CVE:CVE-2004-0841
CNNVD:CNNVD-200412-098
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。
Microsoft Internet Explorer存在安全漏洞。远程攻击者可以利用这个漏洞在弹出窗口实现各种不安全操作。Popup.show()允许用户在适当位置弹出窗口。在Mousedown上调用它时show()函数不会拒绝访问， 因此攻击者可以利用此问题劫持鼠标事件，可诱使用户在弹出对话框上执行各种不安全操作，如无交互情况下增加默认主页连接等。
solution:Upgrade avaya ip600_media_servers to a higher version than *; Upgrade microsoft ie to a higher version than 6.0:sp1,and avoid the version 6.0:sp1; Upgrade microsoft internet_explorer to a higher version than 5.0.1,5.0.1:sp1,5.0.1:sp2,5.0.1:sp3,5.0.1:sp4,5.5,5.5:sp1,5.5:sp2,6.0,and avoid the version 5.0.1,5.0.1:sp1,5.0.1:sp2,5.0.1:sp3,5.0.1:sp4,5.5,5.5:sp1,5.5:sp2,6.0; Upgrade avaya definity_one_media_server to a higher version than *; Upgrade avaya s3400 to a higher version than *; Upgrade avaya s8100 to a higher version than *; Upgrade avaya modular_messaging_message_storage_server to a higher version than 1.1,2.0,and avoid the version 1.1,2.0