First published: Wed Feb 19 2003(Updated: )
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Internet Explorer | =6.0-sp1 | |
Internet Explorer | =5.5-sp2 | |
Internet Explorer | =5.0.1 | |
Internet Explorer | =5.0.1-sp2 | |
Internet Explorer | =5.0.1-sp3 | |
Internet Explorer | =5.0.1-sp1 | |
Internet Explorer | =5.5 | |
Internet Explorer | =5.5-sp1 | |
Internet Explorer | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-1328 is classified as a critical vulnerability due to its potential to allow remote code execution.
To remediate CVE-2003-1328, users should upgrade to a more secure version of Microsoft Internet Explorer or apply available patches.
CVE-2003-1328 affects Microsoft Internet Explorer versions 5.0.1, 5.5, and 6.0.
Yes, CVE-2003-1328 can be exploited remotely by attackers through the showHelp() function in affected versions of Internet Explorer.
CVE-2003-1328 poses significant risks for enterprise security as it can lead to unauthorized access and execution of malicious code.