[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0727Date: (C)2004-07-27   (M)2023-12-22


Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECUNIA-12048
http://marc.info/?l=bugtraq&m=108966512815373&w=2
MS04-038
TA04-293A
VU#207264
http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm
ie-function-redirect-xss(16681)
oval:org.mitre.oval:def:4702
oval:org.mitre.oval:def:6829
oval:org.mitre.oval:def:7084
oval:org.mitre.oval:def:7448
oval:org.mitre.oval:def:7496
oval:org.mitre.oval:def:7906

OVAL    6
oval:org.mitre.oval:def:7496
oval:org.mitre.oval:def:7906
oval:org.mitre.oval:def:4702
oval:org.mitre.oval:def:7448
...

© SecPod Technologies