CVE

Id
7638  
CVE No.
CVE-2003-0814  
Status
Candidate  
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window"s "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.  
Phase
Assigned (20030918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44967 7638 CVE-2003-0814 BUGTRAQ:20030910 MSIE->BodyRefreshLoadsJPU:refresh is a new navigation method  View
44968 7638 CVE-2003-0814 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html  View
44969 7638 CVE-2003-0814 BUGTRAQ:20030911 LiuDieYu"s missing files are here.  View
44970 7638 CVE-2003-0814 URL:http://www.securityfocus.com/archive/1/337086  View
44971 7638 CVE-2003-0814 MISC:http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm  View
44972 7638 CVE-2003-0814 MS:MS03-048  View
44973 7638 CVE-2003-0814 URL:http://www.microsoft.com/technet/security/bulletin/ms03-048.asp  View
44974 7638 CVE-2003-0814 CERT-VN:VU#326412  View
44975 7638 CVE-2003-0814 URL:http://www.kb.cert.org/vuls/id/326412  View
44976 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:335  View
44977 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:335  View
44978 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:341  View
44979 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:341  View
44980 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:342  View
44981 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:342  View
44982 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:343  View
44983 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:343  View
44984 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:344  View
44985 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:344  View
44986 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:349  View
44987 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:349  View
44988 7638 CVE-2003-0814 OVAL:oval:org.mitre.oval:def:392  View
44989 7638 CVE-2003-0814 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:392  View
44990 7638 CVE-2003-0814 SECTRACK:1007687  View
44991 7638 CVE-2003-0814 URL:http://securitytracker.com/id?1007687  View
44992 7638 CVE-2003-0814 SECUNIA:10192  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63608 JVNDB-2003-000334 Microsoft Internet Explorer における関数ポインタが上書きされる脆弱性 Microsoft Internet Explorer には、他のドメインのデータソースへのアクセスを禁止するクロスドメインセキュリティチェックの実装の不備のため、関数ポインタが上書き可能な脆弱性が存在します。 CVE-2003-0815 7638 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000334.html  View