CVE-2003-0815
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.7%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 18.73% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/ie · microsoft/internet explorer
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=106321757619047&w=2
- http://marc.info/?l=bugtraq&m=106322542104656&w=2
- http://secunia.com/advisories/10192
- http://securitytracker.com/id?1007687
- http://www.ciac.org/ciac/bulletins/o-021.shtml
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
- http://www.osvdb.org/7888
- http://www.osvdb.org/7889
- http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM
- http://www.securityfocus.com/archive/1/337086
- http://www.securityfocus.com/bid/9014Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13676
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472
- http://marc.info/?l=bugtraq&m=106321757619047&w=2
- http://marc.info/?l=bugtraq&m=106322542104656&w=2
- http://secunia.com/advisories/10192
- http://securitytracker.com/id?1007687
- http://www.ciac.org/ciac/bulletins/o-021.shtml
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
- http://www.osvdb.org/7888
- http://www.osvdb.org/7889
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.