PT-2004-1807 · Microsoft · Internet Explorer

Paul · Publicado 2004-07-23 · Atualizado 2021-07-23 · CVE-2004-0727

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6.0.2800.1106

Description The issue allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6.0.2800.1106, consider applying configuration changes to restrict the execution of arbitrary code in the local computer zone until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-0727

Produtos afetados

Internet Explorer

Referências · 15

• 🔥 https://exploit-db.com/exploits/24265 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7084 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7906 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4702 · Nota
• http://secunia.com/advisories/12048 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16681 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7496 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6829 · Nota
• http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7448 · Nota
• http://us-cert.gov/cas/techalerts/TA04-293A.html · Nota
• http://marc.info/?l=bugtraq&m=108966512815373&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0727 · Nota de Segurança
• http://kb.cert.org/vuls/id/207264 · Nota