Skip to content
Fencer Vulns
high 7.5

CVE-2004-0727 in the critical feed json

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers…

published 2004-07-23 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0725

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
39.8%
EPSS 39.8% chance of exploitation in 30 days, percentile 98%
public exploits
1
Exploit-DB

Summary

Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."

Timeline

  1. First public exploit (EDB-24265)
  2. Published

Exploit prediction

39.78% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-24265 Microsoft Internet Explorer 5.0.1 - JavaScript Method Assignment Cross-Domain Scripting remote, 2004-07-12

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.