NVD

Id
74099  
Name
CVE-2003-1027  
Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the Function Pointer Drag and Drop Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-01-20  
Modified Date
2017-07-10  
Seq
2003-1027  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380999 74099 CVE-2003-1027 20031125 HijackClickV2 - a successor of HijackClick attack  View
381000 74099 CVE-2003-1027 20031201 Comments on 5 IE vulnerabilities  View
381001 74099 CVE-2003-1027 oval:org.mitre.oval:def:527  View
381002 74099 CVE-2003-1027 oval:org.mitre.oval:def:529  View
381003 74099 CVE-2003-1027 oval:org.mitre.oval:def:530  View
381004 74099 CVE-2003-1027 oval:org.mitre.oval:def:531  View
381005 74099 CVE-2003-1027 oval:org.mitre.oval:def:532  View
381006 74099 CVE-2003-1027 oval:org.mitre.oval:def:534  View
381007 74099 CVE-2003-1027 oval:org.mitre.oval:def:629  View
381008 74099 CVE-2003-1027 VU#413886  View
381009 74099 CVE-2003-1027 MS04-004  View
381010 74099 CVE-2003-1027 http://www.safecenter.net/UMBRELLAWEBV4/HijackClickV2  View
381011 74099 CVE-2003-1027 1006036  View
381012 74099 CVE-2003-1027 TA04-033A  View
381013 74099 CVE-2003-1027 ie-method-perform-actions(13844)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62688 JVNDB-2004-000029 Microsoft Internet Explorer の window.moveBy メソッドにおける任意のファイルが取得される脆弱性 Microsoft Internet Explorer には、 DHTML オブジェクトのイベントにおいて、ウィンドウ位置の変更を行う window.moveBy メソッドをオブジェクトキャッシュを使用して呼び出した場合、ドラッグ＆ドロップ操作イベントを不適切に処理する脆弱性が存在します。 CVE-2003-1027 7850 CVE-2003-1027 74099 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000029.html 2004-02-02 2007-04-01 View