high7.5Public exploit code
CVE-2003-0113
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containin…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5 - Remote 'URLMON.dll' Remote Buffer Overflow2003-04-23 · remote · windows · Verified
Impact
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Versions 5.0.1, 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105138417416900&w=2
- http://marc.info/?l=bugtraq&m=105718285107246&w=2
- http://www.kb.cert.org/vuls/id/169753
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A926
- http://marc.info/?l=bugtraq&m=105138417416900&w=2
- http://marc.info/?l=bugtraq&m=105718285107246&w=2
- http://www.kb.cert.org/vuls/id/169753
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A926