CVE

Id
7865  
CVE No.
CVE-2003-1041  
Status
Candidate  
Description
Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.  
Phase
Assigned (20040513)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
47038 7865 CVE-2003-1041 BUGTRAQ:20031230 IE 5.x-6.0 allows executing arbitrary programs using showHelp()  View
47039 7865 CVE-2003-1041 URL:http://www.securityfocus.com/archive/1/348521  View
47040 7865 CVE-2003-1041 MS:MS04-023  View
47041 7865 CVE-2003-1041 URL:http://www.microsoft.com/technet/security/bulletin/ms04-023.asp  View
47042 7865 CVE-2003-1041 CERT:TA04-196A  View
47043 7865 CVE-2003-1041 URL:http://www.us-cert.gov/cas/techalerts/TA04-196A.html  View
47044 7865 CVE-2003-1041 CERT-VN:VU#187196  View
47045 7865 CVE-2003-1041 URL:http://www.kb.cert.org/vuls/id/187196  View
47046 7865 CVE-2003-1041 XF:ie-showhelp-directory-traversal(14105)  View
47047 7865 CVE-2003-1041 URL:http://xforce.iss.net/xforce/xfdb/14105  View
47048 7865 CVE-2003-1041 BID:9320  View
47049 7865 CVE-2003-1041 URL:http://www.securityfocus.com/bid/9320  View
47050 7865 CVE-2003-1041 OVAL:oval:org.mitre.oval:def:1186  View
47051 7865 CVE-2003-1041 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1186  View
47052 7865 CVE-2003-1041 OVAL:oval:org.mitre.oval:def:1943  View
47053 7865 CVE-2003-1041 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1943  View
47054 7865 CVE-2003-1041 OVAL:oval:org.mitre.oval:def:3514  View
47055 7865 CVE-2003-1041 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3514  View
47056 7865 CVE-2003-1041 OVAL:oval:org.mitre.oval:def:956  View

Related JVN