CVE-2003-0815
N/A
N/A
Summary
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.ciac.org/ciac/bulletins/o-021.shtml
- http://marc.info/?l=bugtraq&m=106321757619047&w=2
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13676
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472
- http://www.osvdb.org/7889
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048
- http://securitytracker.com/id?1007687
- http://www.securityfocus.com/archive/1/337086
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359
- http://marc.info/?l=bugtraq&m=106322542104656&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356
- http://www.securityfocus.com/bid/9014
- http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352
- http://www.osvdb.org/7888
- http://secunia.com/advisories/10192
References
- http://www.ciac.org/ciac/bulletins/o-021.shtml
- http://marc.info/?l=bugtraq&m=106321757619047&w=2
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13676
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472
- http://www.osvdb.org/7889
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048
- http://securitytracker.com/id?1007687
- http://www.securityfocus.com/archive/1/337086
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359
- http://marc.info/?l=bugtraq&m=106322542104656&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356
- http://www.securityfocus.com/bid/9014
- http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM
- http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352
- http://www.osvdb.org/7888
- http://secunia.com/advisories/10192
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.