published July 17, 2003
NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.