CVE-2003-1041: High severity Microsoft ie vulnerability

Published May 20, 2004

Updated

Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.

Affected Software

7 affected components

Microsoft ie=6-windows_server_2003_sp1

Microsoft ie=6.0-sp1

Microsoft Internet Explorer=5

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=6.0

Event History

May 20, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1041?

CVE-2003-1041 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2003-1041?

To mitigate CVE-2003-1041, users should update to the latest version of Internet Explorer or apply any relevant patches provided by Microsoft.

What software is affected by CVE-2003-1041?

CVE-2003-1041 affects Internet Explorer versions 5.x and 6.0, including specific service packs.

Can CVE-2003-1041 be exploited remotely?

Yes, CVE-2003-1041 can be exploited remotely by attackers via specially crafted URLs.

What is the type of vulnerability for CVE-2003-1041?

CVE-2003-1041 is classified as a directory traversal vulnerability.