Exploitation Summary
CVE-2003-1041 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Arman Nayyeri.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in the showHelp() function to bypass Microsoft's patch for MS03-004, allowing arbitrary local CHM file execution. It demonstrates how an attacker could reference a malicious CHM file via traversal sequences.
Description
Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.
Exploits (1)
This exploit leverages a directory traversal vulnerability in the showHelp() function to bypass Microsoft's patch for MS03-004, allowing arbitrary local CHM file execution. It demonstrates how an attacker could reference a malicious CHM file via traversal sequences.