CVE-2003-0447
Internet Explorer 5.01-6.0 - Remote Code Execution via Custom HTTP Errors
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2003-0447. PoCs published by GreyMagic Software.
AI-analyzed exploit summary This exploit leverages a vulnerability in Microsoft Internet Explorer's handling of custom HTTP error messages to inject and execute arbitrary JavaScript code. The PoC demonstrates HTML injection via malformed URLs in 'res://' protocol handlers, potentially leading to cookie theft or other client-side attacks.
Description
The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.
Exploits (1)
This exploit leverages a vulnerability in Microsoft Internet Explorer's handling of custom HTTP error messages to inject and execute arbitrary JavaScript code. The PoC demonstrates HTML injection via malformed URLs in 'res://' protocol handlers, potentially leading to cookie theft or other client-side attacks.