CVE

Id
7359  
CVE No.
CVE-2003-0532  
Status
Candidate  
Description
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.  
Phase
Assigned (20030708)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
43133 7359 CVE-2003-0532 VULNWATCH:20030820 EEYE: Internet Explorer Object Data Remote Execution Vulnerability  View
43134 7359 CVE-2003-0532 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0084.html  View
43135 7359 CVE-2003-0532 BUGTRAQ:20030820 EEYE: Internet Explorer Object Data Remote Execution Vulnerability  View
43136 7359 CVE-2003-0532 URL:http://marc.info/?l=bugtraq&m=106149026621753&w=2  View
43137 7359 CVE-2003-0532 MISC:http://www.eeye.com/html/Research/Advisories/AD20030820.html  View
43138 7359 CVE-2003-0532 MS:MS03-032  View
43139 7359 CVE-2003-0532 URL:http://www.microsoft.com/technet/security/bulletin/ms03-032.asp  View
43140 7359 CVE-2003-0532 CERT-VN:VU#865940  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62777 JVNDB-2004-000118 Microsoft Windows の LSASS におけるバッファオーバーフローの脆弱性 Microsoft Windows の LSASS には、RPC を利用した関数呼び出しのログを記録する際に、適切なチェックを行わない脆弱性が存在します。 CVE-2003-0533 7359 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000118.html  View