CVE-2003-0815

Internet Explorer 6 SP1 - Auth Bypass

Title source: llm

Description

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.

References (22)

Core 22

Core References

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352

Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac

http://www.ciac.org/ciac/bulletins/o-021.shtml

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=106321757619047&w=2

Various Sources mailing-list x_refsource_bugtraq

http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/13676

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/7889

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1007687

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/337086

Various Sources x_refsource_misc

http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=106322542104656&w=2

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/9014

Various Sources x_refsource_misc

http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM

Various Sources x_refsource_misc

http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/7888

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/10192

Scores

EPSS 0.1873

EPSS Percentile 97.0%

Details

Status published

Products (4)

microsoft/ie 6.0 sp1

microsoft/internet_explorer 5.0.1 (4 CPE variants)

microsoft/internet_explorer 5.5 (3 CPE variants)

microsoft/internet_explorer 6.0

Published Feb 03, 2004

Tracked Since Feb 18, 2026