CVE-2003-1028: Medium severity Microsoft ie vulnerability
The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1028?
CVE-2003-1028 is considered a moderate severity vulnerability that can lead to information disclosure.
How do I fix CVE-2003-1028?
To fix CVE-2003-1028, users should upgrade to a later version of Internet Explorer that does not have this vulnerability.
Which versions of Internet Explorer are affected by CVE-2003-1028?
CVE-2003-1028 affects Internet Explorer versions 5.0, 5.0.1, 5.5, and 6.0 SP1.
What type of attack does CVE-2003-1028 allow?
CVE-2003-1028 allows remote attackers to obtain cache directory names, potentially bypassing security mechanisms.
Is there any workaround for CVE-2003-1028?
There is no specific workaround for CVE-2003-1028; updating to an unaffected version of Internet Explorer is recommended.