high7.5Public exploit code
CVE-2003-1328
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution2003-02-05 · remote · windows · Verified
Impact
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Versions 5.0.1, 5.5, 6.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.html
- http://www.ciac.org/ciac/bulletins/n-038.shtml
- http://www.iss.net/security_center/static/11259.php
- http://www.kb.cert.org/vuls/id/400577
- http://www.securityfocus.com/bid/6780
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.html
- http://www.ciac.org/ciac/bulletins/n-038.shtml
- http://www.iss.net/security_center/static/11259.php
- http://www.kb.cert.org/vuls/id/400577
- http://www.securityfocus.com/bid/6780
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57