CVE-2004-0727
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions...
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."
- Record
CVE-2004-0727- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."
- Record
CVE-2004-0727- Updated
- 2026-11-02
EUVDEUVD-2004-0725 No score
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."
- Record
EUVD-2004-0725- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j84g-hfg4-3cpg No score
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions...
Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."
- Record
GHSA-j84g-hfg4-3cpg- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting | 2004-07-12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0727 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published July 23, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 39.8%, the 98th percentile. No source names a fixed version.
References
freehost07.websamba.com/greyhats/similarmethodnameredir.htm
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7448
kb.cert.org/vuls/id/207264
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
Show 9 moreShow less
secunia.com/advisories/12048
us-cert.gov/cas/techalerts/TA04-293A.html
exchange.xforce.ibmcloud.com/vulnerabilities/16681
marc.info?l=bugtraq&m=108966512815373&w=2
nvd.nist.gov/vuln/detail/CVE-2004-0727
github.com/advisories/GHSA-j84g-hfg4-3cpg