CVE-2003-0519: Medium severity Microsoft Internet Explorer vulnerability
Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device name) and possibly other devices.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
At network perimeter (proxy, WAF, or firewall) block or filter web requests, links, and web content that include the MS‑DOS device name literal "C:\\aux" (i.e., any URL or payload containing the string C:\aux or references to the device name aux in path components) to prevent these requests from reaching Internet Explorer 5 or 6 clients.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0519?
CVE-2003-0519 has a severity rating of medium, as it causes a denial of service in affected versions of Internet Explorer.
How do I fix CVE-2003-0519?
To fix CVE-2003-0519, users should update to the latest patch for Internet Explorer 5 or 6 provided by Microsoft.
What versions of Internet Explorer are affected by CVE-2003-0519?
CVE-2003-0519 affects Internet Explorer versions 5.0 and 6.0 on certain Windows environments.
Can CVE-2003-0519 be exploited remotely?
Yes, CVE-2003-0519 can be exploited remotely, causing the browser to freeze when a specific URL is accessed.
Is there a workaround for CVE-2003-0519?
A possible workaround for CVE-2003-0519 is to avoid opening URLs that reference MS-DOS device names in Internet Explorer.