CVE-2003-0532: High severity Microsoft ie vulnerability
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0532?
CVE-2003-0532 has a critical severity rating as it allows remote code execution through manipulated web server responses.
How do I fix CVE-2003-0532?
To fix CVE-2003-0532, users should upgrade to a supported version of Internet Explorer, preferably beyond version 6.0 SP1.
Which versions of Internet Explorer are affected by CVE-2003-0532?
CVE-2003-0532 affects Internet Explorer versions 5.01 SP3 through 6.0 SP1.
What kind of attack is associated with CVE-2003-0532?
CVE-2003-0532 can be exploited through a remote code execution attack via malicious content served by a web server.
Can CVE-2003-0532 be exploited without user interaction?
Yes, CVE-2003-0532 can potentially be exploited automatically without direct user interaction if the victim accesses a specially crafted web page.