CVE-2003-0823

CVE-2003-0823, dubbed "HijackClick," affects Microsoft Internet Explorer 6 SP1 and earlier, allowing remote attackers to manipulate user interface elements. Specifically, it enables an attacker to redirect drag-and-drop actions and other mouse clicks to unintended windows by leveraging the window.moveBy method. This vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor readily available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, placing it in the top 1% of CVEs for mentions.