CVE-2001-1410

None

CVSS

—

EPSS

50.5%

Published

Aug 18, 2003

CISA due date

—

The record

Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.

Affected packages

Ecosystem	Package	Introduced	Fixed