# CVE-2001-1410

## Summary

- **CVE ID:** CVE-2001-1410
- **Severity:** UNKNOWN
- **CVSS Score:** 3.08
- **CWE:** N/A
- **Published:** Jul 17, 2003
- **Last Modified:** Mar 16, 2026

## Description

Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://marc.info/?l=bugtraq&m=105820229407274&w=2)
- [CNA](https://exchange.xforce.ibmcloud.com/vulnerabilities/7313)
- [CNA](http://www.securityfocus.com/bid/3469)
- [CNA](http://marc.info/?l=bugtraq&m=105829174431769&w=2)
- [CNA](http://www.systemintegra.com/ie-fullscreen/)
- [CNA](http://www.kb.cert.org/vuls/id/490708)
- [CNA](http://www.securityfocus.com/archive/1/221883)
- [CNA](http://www.guninski.com/popspoof.html)
- [CNA](http://www.doxdesk.com/personal/posts/bugtraq/20030713-ie/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 61.59%
- **EPSS Percentile:** 98.3

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._