PT-2003-2273 · Microsoft · Internet Explorer

Andreas Sandblad · Publicado 2003-02-19 · Atualizado 2021-07-23 · CVE-2003-1328

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6.0

Description The issue concerns the showHelp() function, which supports certain types of pluggable protocols. This allows remote attackers to bypass the cross-domain security model and execute arbitrary code.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6.0, as a temporary workaround, consider disabling the showHelp() function until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2003-1328

Produtos afetados

Internet Explorer

Referências · 9

• 🔥 https://exploit-db.com/exploits/22226 · Exploit
• http://iss.net/security_center/static/11259.php · Aviso do Fabricante
• http://securityfocus.com/bid/6780 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004 · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/n-038.shtml · Nota
• http://kb.cert.org/vuls/id/400577 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1328 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.html · Nota