PT-2004-1165 · Microsoft · Internet Explorer

Liu Die Yu

·

Publicado

2004-01-14

·

Atualizado

2021-07-23

·

CVE-2003-0816

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Internet Explorer versions 6 SP1 and earlier
Description The issue allows remote attackers to bypass zone restrictions. This can be achieved through several methods, including using the NavigateAndFind method to load a file: URL containing Javascript, utilizing the window.open method to load a file: URL containing Javascript, setting the href property in the base tag for the search window, loading the search window into an Iframe, or caching a javascript: URL in the browser history and then accessing that URL in the same frame as the target domain.
Recommendations For Internet Explorer versions 6 SP1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2003-0816

Produtos afetados

Internet Explorer