CVE-2003-0447

Exploit

EPSS 30.41%
Published 24.07.2003 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version5.01

Microsoft ≫ Internet Explorer Version5.5

Microsoft ≫ Internet Explorer Version6.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	30.41%	0.965

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005763.html

http://marc.info/?l=bugtraq&m=105585933614773&w=2

http://marc.info/?l=ntbugtraq&m=105585142406147&w=2

http://security.greymagic.com/adv/gm014-ie/

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2003-0447

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0447

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0447

EUVD