Vulnerability Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Ie | 6.0 |
| Microsoft | Internet Explorer | 5.0.1 |
References
- http://marc.info/?l=bugtraq&m=106321757619047&w=2
- http://marc.info/?l=bugtraq&m=106322542104656&w=2
- http://secunia.com/advisories/10192
- http://securitytracker.com/id?1007687
- http://www.ciac.org/ciac/bulletins/o-021.shtml
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
- http://www.osvdb.org/7888
- http://www.osvdb.org/7889
- http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Conten
- http://www.securityfocus.com/archive/1/337086
- http://www.securityfocus.com/bid/9014PatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-04
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13676
FAQ
What is CVE-2003-0815?
CVE-2003-0815 is a vulnerability with a CVSS score of 7.5 (HIGH). Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using...
How severe is CVE-2003-0815?
CVE-2003-0815 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-0815?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Ie, Microsoft Internet Explorer.