CVE-2003-0814: High severity Microsoft ie vulnerability
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0814?
CVE-2003-0814 is considered a high severity vulnerability due to its ability to bypass security restrictions and execute arbitrary scripts.
How can I fix CVE-2003-0814?
To fix CVE-2003-0814, it is recommended to upgrade to a newer version of Internet Explorer that is not affected by this vulnerability.
Which versions of Internet Explorer are affected by CVE-2003-0814?
CVE-2003-0814 affects Internet Explorer versions 5.0.1 SP1 and later, up to 6.0 SP1.
What types of attacks can exploit CVE-2003-0814?
CVE-2003-0814 can be exploited by remote attackers to execute malicious JavaScript code through cross-domain script execution.
Is there a workaround for CVE-2003-0814?
A potential workaround for CVE-2003-0814 is to disable JavaScript execution in the affected Internet Explorer versions.