First published: Fri May 02 2003(Updated: )
Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Internet Explorer | =6.0-sp1 | |
Internet Explorer | =5.5-sp2 | |
Internet Explorer | =5.0.1 | |
Internet Explorer | =5.0.1-sp2 | |
Internet Explorer | =5.0.1-sp3 | |
Internet Explorer | =5.0.1-sp1 | |
Internet Explorer | =5.5 | |
Internet Explorer | =5.5-sp1 | |
Internet Explorer | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0115 is considered a critical vulnerability due to the potential for remote code execution.
To mitigate CVE-2003-0115, it is recommended to apply the security patch provided by Microsoft for affected versions of Internet Explorer.
CVE-2003-0115 affects Internet Explorer versions 5.01, 5.5, and 6.0.
CVE-2003-0115 allows remote attackers to execute arbitrary scripts, which could lead to data theft, system compromise, or further propagation of malicious code.
A possible workaround for CVE-2003-0115 is to disable the use of third-party browser plugins until a patch is applied.