PT-2004-1807 · Microsoft · Internet Explorer

Paul · Published 2004-07-23 · Updated 2021-07-23 · CVE-2004-0727

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6.0.2800.1106

Description The issue allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6.0.2800.1106, consider applying configuration changes to restrict the execution of arbitrary code in the local computer zone until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-0727

Affected Products

Internet Explorer

References · 15

• 🔥 https://exploit-db.com/exploits/24265 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0727 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7084 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7906 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4702 · Note
• http://secunia.com/advisories/12048 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16681 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7496 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6829 · Note
• http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7448 · Note
• http://us-cert.gov/cas/techalerts/TA04-293A.html · Note
• http://marc.info/?l=bugtraq&m=108966512815373&w=2 · Note
• http://kb.cert.org/vuls/id/207264 · Note