CVE-2003-0532
published 2003-08-27CVE-2003-0532: Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to…
PriorityP434high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
22.96%
97.5th percentile
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | ie | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rjqq-fhgc-2rj8: Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and insertin
ghsa_unreviewed·2022-04-29·CVSS 7.5
CVE-2003-0838 [HIGH] GHSA-rjqq-fhgc-2rj8: Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and insertin
Internet Explorer allows remote attackers to bypass zone restrictions to inject and execute arbitrary programs by creating a popup window and inserting ActiveX object code with a "data" tag pointing to the malicious code, which Internet Explorer treats as HTML or Javascript, but later executes as an HTA application, a different vulnerability than CVE-2003-0532, and as exploited using the QHosts Trojan horse (aka Trojan.Qhosts, QHosts-1, VBS.QHOSTS, or aolfix.exe).
GHSA
GHSA-v4mq-xcq7-hmfv: Internet Explorer 5
ghsa_unreviewed·2022-04-29
CVE-2003-0532 [HIGH] GHSA-v4mq-xcq7-hmfv: Internet Explorer 5
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0084.htmlhttp://marc.info/?l=bugtraq&m=106149026621753&w=2http://www.eeye.com/html/Research/Advisories/AD20030820.htmlhttp://www.kb.cert.org/vuls/id/865940https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0084.htmlhttp://marc.info/?l=bugtraq&m=106149026621753&w=2http://www.eeye.com/html/Research/Advisories/AD20030820.htmlhttp://www.kb.cert.org/vuls/id/865940https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032
2003-08-27
Published