CVE-2003-0344 Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.
HighCVSS 7.5
EPSS 81.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 6.0 | No fix listed |
| Microsoft internet explorer | = 5.01 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20030709 IE Object Type Overflow Exploit mailing-list
- 20030604 Internet Explorer Object Type Property Overflow mailing-list
- 8943 third-party-advisory
- AD20030604 patch third-party-advisory vendor-advisory
- VU#679556 third-party-advisory us-government-resource
- MS03-020 vendor-advisory
- oval:org.mitre.oval:def:922 signature vdb-entry