PT-2003-2273 · Microsoft · Internet Explorer

Andreas Sandblad · Published 2003-02-19 · Updated 2021-07-23 · CVE-2003-1328

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6.0

Description The issue concerns the showHelp() function, which supports certain types of pluggable protocols. This allows remote attackers to bypass the cross-domain security model and execute arbitrary code.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6.0, as a temporary workaround, consider disabling the showHelp() function until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2003-1328

Affected Products

Internet Explorer

References · 9

• 🔥 https://exploit-db.com/exploits/22226 · Exploit
• http://iss.net/security_center/static/11259.php · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1328 · Security Note
• http://securityfocus.com/bid/6780 · Note
• http://ciac.org/ciac/bulletins/n-038.shtml · Note
• http://kb.cert.org/vuls/id/400577 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57 · Note
• http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.html · Note