CVE-2003-0815
First published: Wed Jan 14 2004(Updated: )
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Ie | =6.0-sp1 | |
| Microsoft Internet Explorer | =5.5-sp2 | |
| Microsoft Internet Explorer | =5.0.1 | |
| Microsoft Internet Explorer | =5.0.1-sp2 | |
| Microsoft Internet Explorer | =5.0.1-sp3 | |
| Microsoft Internet Explorer | =5.0.1-sp1 | |
| Microsoft Internet Explorer | =5.5 | |
| Microsoft Internet Explorer | =5.5-sp1 | |
| Microsoft Internet Explorer | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/9014
- http://www.securityfocus.com/archive/1/337086
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
- http://www.ciac.org/ciac/bulletins/o-021.shtml
- http://www.osvdb.org/7888
- http://www.osvdb.org/7889
- http://securitytracker.com/id?1007687
- http://secunia.com/advisories/10192
- http://marc.info/?l=bugtraq&m=106322542104656&w=2
- http://marc.info/?l=bugtraq&m=106321757619047&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13676
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/event
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft ie
- version/microsoft ie/6.0-sp1
- canonical/microsoft internet explorer
- version/microsoft internet explorer/5.5-sp2
- version/microsoft internet explorer/5.0.1
- version/microsoft internet explorer/5.0.1-sp2
- version/microsoft internet explorer/5.0.1-sp3
- version/microsoft internet explorer/5.0.1-sp1
- version/microsoft internet explorer/5.5
- version/microsoft internet explorer/5.5-sp1
- version/microsoft internet explorer/6.0