CVE-2003-1027
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors...
CVE-2003-1027 is a high vulnerability (CVSS 10.0) in Microsoft Internet Explorer, published January 8, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 38.1%, the 98th percentile. No source names a fixed version.
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
- Record
CVE-2003-1027- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
- Record
CVE-2003-1027- Updated
- 2026-11-02
EUVDEUVD-2003-1017 No score
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
- Record
EUVD-2003-1017- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j6fj-77f5-j227 No score
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors...
Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."
- Record
GHSA-j6fj-77f5-j227- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A527
kb.cert.org/vuls/id/413886
safecenter.net/UMBRELLAWEBV4/HijackClickV2
Show 11 moreShow less
marc.info?l=bugtraq&m=107038202225587&w=2
us-cert.gov/cas/techalerts/TA04-033A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004
exchange.xforce.ibmcloud.com/vulnerabilities/13844
securitytracker.com/id?1006036
nvd.nist.gov/vuln/detail/CVE-2003-1027
github.com/advisories/GHSA-j6fj-77f5-j227