Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0816. PoCs published by Liu Die Yu & Jelmer, Liu Die Yu.
AI-analyzed exploit summary The provided entry is a placeholder for CVE-2003-0816, referencing multiple unspecified issues in Microsoft Internet Explorer. It lacks exploit code or technical details, instead pointing to a SecurityFocus BID and a GitLab link for additional information.
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.
Exploits (2)
The provided entry is a placeholder for CVE-2003-0816, referencing multiple unspecified issues in Microsoft Internet Explorer. It lacks exploit code or technical details, instead pointing to a SecurityFocus BID and a GitLab link for additional information.
This exploit leverages a cross-zone scripting vulnerability in Microsoft Internet Explorer by using the window.open method to inject malicious script code into the search pane, allowing access to document properties across different security zones and foreign domains.