PT-2003-1632 · Microsoft · Internet Explorer+1

Publicado

2003-06-20

·

Atualizado

2021-07-23

·

CVE-2003-0447

CVSS v2.0

5.1

Média

VetorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.01 through 6.0
Description: The issue allows remote attackers to execute script in the Local Zone. This is achieved by providing a specific argument to shdocvw.dll, which results in the generation of a "javascript:" link.
Recommendations: For Internet Explorer versions 5.01 through 6.0, consider disabling the Custom HTTP Errors capability as a temporary workaround until a patch is available. Restrict access to the shdocvw.dll module to minimize the risk of exploitation. Avoid using arguments that could cause a "javascript:" link to be generated in the affected versions.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0447

Produtos afetados

Internet Explorer
Shdocvw.Dll