CVE-2003-0447 The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to....
MediumCVSS 5.1
EPSS 13.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.01 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 20030617 Script Injection to Custom HTTP Errors in Local Zone (GM#014-IE) mailing-list
- 20030617 Script Injection to Custom HTTP Errors in Local Zone (GM#014-IE) mailing-list
- 20030617 Script Injection to Custom HTTP Errors in Local Zone (GM#014-IE) mailing-list
- security.greymagic.com exploit vendor-advisory