CVE-2003-0309 Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other re...
HighCVSS 7.5
EPSS 50.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0.2800 | No fix listed |
References
- 20030508 Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! [CRITICAL] mailing-list
- 20030513 Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! - UPDATED mailing-list
- 20030513 Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! - UPDATED mailing-list
- 8807 third-party-advisory
- VU#251788 third-party-advisory us-government-resource
- 7539 vdb-entry
- MS03-020 vendor-advisory
- ie-frame-restrictions-bypass(12019) vdb-entry
- oval:org.mitre.oval:def:948 signature vdb-entry