CVE

Id
7273  
CVE No.
CVE-2003-0446  
Status
Candidate  
Description
Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows remote attackers to insert arbitrary web script via an XML file that contains a parse error, which inserts the script in the resulting error message.  
Phase
Assigned (20030619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
42639 7273 CVE-2003-0446 BUGTRAQ:20030617 Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
42640 7273 CVE-2003-0446 URL:http://marc.info/?l=bugtraq&m=105585986015421&w=2  View
42641 7273 CVE-2003-0446 BUGTRAQ:20030617 Re: [Full-Disclosure] Cross-Site Scripting in Unparsable XML Files  View
42642 7273 CVE-2003-0446 URL:http://marc.info/?l=bugtraq&m=105595990924165&w=2  View
42643 7273 CVE-2003-0446 BUGTRAQ:20030617 Re: Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
42644 7273 CVE-2003-0446 URL:http://archives.neohapsis.com/archives/bugtraq/2003-06/0120.html  View
42645 7273 CVE-2003-0446 NTBUGTRAQ:20030617 Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
42646 7273 CVE-2003-0446 URL:http://marc.info/?l=ntbugtraq&m=105585001905002&w=2  View
42647 7273 CVE-2003-0446 FULLDISC:20030617 Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
42648 7273 CVE-2003-0446 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005762.html  View
42649 7273 CVE-2003-0446 MISC:http://security.greymagic.com/adv/gm013-ie/  View
42650 7273 CVE-2003-0446 BID:7938  View
42651 7273 CVE-2003-0446 URL:http://www.securityfocus.com/bid/7938  View
42652 7273 CVE-2003-0446 OSVDB:3065  View
42653 7273 CVE-2003-0446 URL:http://www.osvdb.org/3065  View
42654 7273 CVE-2003-0446 SECUNIA:9055  View
42655 7273 CVE-2003-0446 URL:http://secunia.com/advisories/9055  View
42656 7273 CVE-2003-0446 XF:ie-msxml-xss(12334)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63460 JVNDB-2003-000186 Microsoft Internet Explorer のカスタムメッセージを表示するための URL における任意のスクリプトを実行される脆弱性 Microsoft Internet Explorer にはカスタムメッセージを表示するための URL に対するサイニタイジングが不適切であるため、特定の文字に続けて JavaScript を含ませることにより、そのスクリプトがそのまま解釈され、実行されてしまう脆弱性が存在します。 CVE-2003-0447 7273 5.1 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000186.html  View