CVE-2004-0727
EXPLOITEDMicrosoft Internet Explorer 6.0.2800.1106 - Auth Bypass
Title source: llmExploitation Summary
CVE-2004-0727 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Paul.
AI-analyzed exploit summary This exploit leverages a cross-domain/cross-zone scripting vulnerability in Microsoft Internet Explorer by manipulating window trust relationships to execute arbitrary JavaScript in a different domain or security zone. The PoC demonstrates how script code can access properties of a foreign domain via window.open and location.assign manipulation.
Description
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."
Exploits (1)
This exploit leverages a cross-domain/cross-zone scripting vulnerability in Microsoft Internet Explorer by manipulating window trust relationships to execute arbitrary JavaScript in a different domain or security zone. The PoC demonstrates how script code can access properties of a foreign domain via window.open and location.assign manipulation.