CVE

Id
7851  
CVE No.
CVE-2003-1027  
Status
Candidate  
Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."  
Phase
Assigned (20040107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
46905 7851 CVE-2003-1027 BUGTRAQ:20031125 HijackClickV2 - a successor of HijackClick attack  View
46906 7851 CVE-2003-1027 URL:http://marc.info/?l=bugtraq&m=106979479719446&w=2  View
46907 7851 CVE-2003-1027 MISC:http://www.safecenter.net/UMBRELLAWEBV4/HijackClickV2  View
46908 7851 CVE-2003-1027 BUGTRAQ:20031201 Comments on 5 IE vulnerabilities  View
46909 7851 CVE-2003-1027 URL:http://marc.info/?l=bugtraq&m=107038202225587&w=2  View
46910 7851 CVE-2003-1027 MS:MS04-004  View
46911 7851 CVE-2003-1027 URL:http://www.microsoft.com/technet/security/bulletin/ms04-004.asp  View
46912 7851 CVE-2003-1027 CERT:TA04-033A  View
46913 7851 CVE-2003-1027 URL:http://www.us-cert.gov/cas/techalerts/TA04-033A.html  View
46914 7851 CVE-2003-1027 CERT-VN:VU#413886  View
46915 7851 CVE-2003-1027 URL:http://www.kb.cert.org/vuls/id/413886  View
46916 7851 CVE-2003-1027 SECTRACK:1006036  View
46917 7851 CVE-2003-1027 URL:http://www.securitytracker.com/id?1006036  View
46918 7851 CVE-2003-1027 XF:ie-method-perform-actions(13844)  View
46919 7851 CVE-2003-1027 URL:http://xforce.iss.net/xforce/xfdb/13844  View
46920 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:527  View
46921 7851 CVE-2003-1027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:527  View
46922 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:529  View
46923 7851 CVE-2003-1027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:529  View
46924 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:530  View
46925 7851 CVE-2003-1027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:530  View
46926 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:531  View
46927 7851 CVE-2003-1027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:531  View
46928 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:532  View
46929 7851 CVE-2003-1027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:532  View
46930 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:534  View
46931 7851 CVE-2003-1027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:534  View
46932 7851 CVE-2003-1027 OVAL:oval:org.mitre.oval:def:629  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62665 JVNDB-2004-000006 Microsoft Internet Explorer の ダウンロード機能におけるキャッシュディレクトリ名が漏洩する脆弱性 Microsoft Internet Explorer には、特定のリクエストヘッダと .HTM ファイルのリクエストの組み合わせの際のファイルのダウンロードの機構に不備が存在するため、一時キャッシュディレクトリ名を取得される脆弱性が存在します。 CVE-2003-1028 7851 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000006.html  View