VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 20, 2004· Updated Jun 16, 2026

CVE-2003-1027

CVE-2003-1027

Description

Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the "Function Pointer Drag and Drop Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Microsoft/Ie
    cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
  • Microsoft/Internet Explorer10 versions
    cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
    • (no CPE)range: 5.01 through 6 SP1

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.