high7.5Public exploit code
CVE-2003-0809
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to ex…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5 - XML Page Object Type Validation (MS03-040)2003-09-08 · remote · windows · Verified
Impact
Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Versions 5.0.1, 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://www.osvdb.org/7887
- http://www.securityfocus.com/bid/8565
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-040
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13300
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A123
- http://www.osvdb.org/7887
- http://www.securityfocus.com/bid/8565
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-040
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13300
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A123