PT-2004-1165 · Microsoft · Internet Explorer
Liu Die Yu
·
Published
2004-01-14
·
Updated
2021-07-23
·
CVE-2003-0816
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Internet Explorer versions 6 SP1 and earlier
Description
The issue allows remote attackers to bypass zone restrictions. This can be achieved through several methods, including using the NavigateAndFind method to load a file: URL containing Javascript, utilizing the window.open method to load a file: URL containing Javascript, setting the href property in the base tag for the search window, loading the search window into an Iframe, or caching a javascript: URL in the browser history and then accessing that URL in the same frame as the target domain.
Recommendations
For Internet Explorer versions 6 SP1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Internet Explorer