CVE-2005-3240

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and re-focusing to a malicious window.

Date published : 2006-02-14

http://www.securityfocus.com/bid/16352

http://www.securityfocus.com/archive/1/424863/100/0/threaded