CVE-2003-0532
First published: Fri Aug 22 2003(Updated: )
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Explorer | =6.0-sp1 | |
| Internet Explorer | =5.0.1 | |
| Internet Explorer | =5.0.1-sp1 | |
| Internet Explorer | =5.0.1-sp2 | |
| Internet Explorer | =5.0.1-sp3 | |
| Internet Explorer | =5.5 | |
| Internet Explorer | =5.5-sp1 | |
| Internet Explorer | =5.5-sp2 | |
| Internet Explorer | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2003-0532?
CVE-2003-0532 has a critical severity rating as it allows remote code execution through manipulated web server responses.
How do I fix CVE-2003-0532?
To fix CVE-2003-0532, users should upgrade to a supported version of Internet Explorer, preferably beyond version 6.0 SP1.
Which versions of Internet Explorer are affected by CVE-2003-0532?
CVE-2003-0532 affects Internet Explorer versions 5.01 SP3 through 6.0 SP1.
What kind of attack is associated with CVE-2003-0532?
CVE-2003-0532 can be exploited through a remote code execution attack via malicious content served by a web server.
Can CVE-2003-0532 be exploited without user interaction?
Yes, CVE-2003-0532 can potentially be exploited automatically without direct user interaction if the victim accesses a specially crafted web page.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/microsoft
- canonical/microsoft internet explorer
- version/microsoft internet explorer/6.0-sp1
- canonical/internet explorer
- version/internet explorer/5.0.1
- version/internet explorer/5.0.1-sp1
- version/internet explorer/5.0.1-sp2
- version/internet explorer/5.0.1-sp3
- version/internet explorer/5.5
- version/internet explorer/5.5-sp1
- version/internet explorer/5.5-sp2
- version/internet explorer/6.0