peter bassill · operator
$ cve CVE-2004-0727 JSON

CVE-2004-0727 EXPLOIT

7.5
HIGH · CVSS 2.0 · EPSS 39.8% (pctl 99)

Patch early

A public exploit exists.

Description

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."

Scoring

CVSS7.5 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS39.78% — more likely to be exploited than 99% of all CVEs
On CISA KEVno
Public exploityes
Published2004-07-27
Last modified2026-06-16

Affected (1)

VendorProduct
microsoftinternet explorer

Public exploits

SourceTitleDate
exploit-dbMicrosoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting2004-07-12

References

→ the Explorer  ·  watch your stack  ·  NVD