CVE-2003-0815
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 19%
exploitation probability
19%top 3% of all CVEs
observed exploitation
nono source reports it
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
Affected products
n/a · n/aReferences
http://marc.info/?l=bugtraq&m=106321757619047&w=2http://marc.info/?l=bugtraq&m=106322542104656&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048http://secunia.com/advisories/10192http://securitytracker.com/id?1007687https://exchange.xforce.ibmcloud.com/vulnerabilities/13676https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359