CVE

Id
7639  
CVE No.
CVE-2003-0815  
Status
Candidate  
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.  
Phase
Assigned (20030918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
44993 7639 CVE-2003-0815 BUGTRAQ:20030910 MSIE->LinkillerSaveRef:another caller-based authorization  View
44994 7639 CVE-2003-0815 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html  View
44995 7639 CVE-2003-0815 BUGTRAQ:20030910 MSIE->LinkillerJPU:another caller-based authorization(is broken).  View
44996 7639 CVE-2003-0815 URL:http://marc.info/?l=bugtraq&m=106321757619047&w=2  View
44997 7639 CVE-2003-0815 BUGTRAQ:20030910 MSIE->Findeath: break caller-based authorization  View
44998 7639 CVE-2003-0815 URL:http://marc.info/?l=bugtraq&m=106322542104656&w=2  View
44999 7639 CVE-2003-0815 BUGTRAQ:20030911 LiuDieYu"s missing files are here.  View
45000 7639 CVE-2003-0815 URL:http://www.securityfocus.com/archive/1/337086  View
45001 7639 CVE-2003-0815 MISC:http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM  View
45002 7639 CVE-2003-0815 MISC:http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM  View
45003 7639 CVE-2003-0815 MISC:http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM  View
45004 7639 CVE-2003-0815 MS:MS03-048  View
45005 7639 CVE-2003-0815 URL:http://www.microsoft.com/technet/security/bulletin/ms03-048.asp  View
45006 7639 CVE-2003-0815 CIAC:O-021  View
45007 7639 CVE-2003-0815 URL:http://www.ciac.org/ciac/bulletins/o-021.shtml  View
45008 7639 CVE-2003-0815 BID:9014  View
45009 7639 CVE-2003-0815 URL:http://www.securityfocus.com/bid/9014  View
45010 7639 CVE-2003-0815 OSVDB:7888  View
45011 7639 CVE-2003-0815 URL:http://www.osvdb.org/7888  View
45012 7639 CVE-2003-0815 OSVDB:7889  View
45013 7639 CVE-2003-0815 URL:http://www.osvdb.org/7889  View
45014 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:351  View
45015 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:351  View
45016 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:352  View
45017 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:352  View
45018 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:353  View
45019 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:353  View
45020 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:356  View
45021 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:356  View
45022 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:357  View
45023 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:357  View
45024 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:359  View
45025 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:359  View
45026 7639 CVE-2003-0815 OVAL:oval:org.mitre.oval:def:472  View
45027 7639 CVE-2003-0815 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:472  View
45028 7639 CVE-2003-0815 SECTRACK:1007687  View
45029 7639 CVE-2003-0815 URL:http://securitytracker.com/id?1007687  View
45030 7639 CVE-2003-0815 SECUNIA:10192  View
45031 7639 CVE-2003-0815 URL:http://secunia.com/advisories/10192  View
45032 7639 CVE-2003-0815 XF:ie-pointer-zone-bypass(13676)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63609 JVNDB-2003-000335 Microsoft Internet Explorer にクロスドメインセキュリティチェックを回避して、不正なスクリプト URL を解釈してしまう脆弱性 Microsoft Internet Explorer には、他のドメインのデータソースへのアクセスを禁止するクロスドメインセキュリティチェックを回避して、不正なスクリプト URL を解釈してしまう脆弱性が存在します。 CVE-2003-0816 7639 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000335.html  View