NVD

Id
73574  
Name
CVE-2003-0446  
Description
Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows remote attackers to insert arbitrary web script via an XML file that contains a parse error, which inserts the script in the resulting error message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2003-07-24  
Modified Date
2017-07-10  
Seq
2003-0446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
378704 73574 CVE-2003-0446 20030617 Re: Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
378705 73574 CVE-2003-0446 20030617 Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
378706 73574 CVE-2003-0446 20030617 Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
378707 73574 CVE-2003-0446 20030617 Re: [Full-Disclosure] Cross-Site Scripting in Unparsable XML Files  View
378708 73574 CVE-2003-0446 20030617 Cross-Site Scripting in Unparsable XML Files (GM#013-IE)  View
378709 73574 CVE-2003-0446 http://security.greymagic.com/adv/gm013-ie/  View
378710 73574 CVE-2003-0446 7938  View
378711 73574 CVE-2003-0446 ie-msxml-xss(12334)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63459 JVNDB-2003-000185 Microsoft Internet Explorer に正しく解析できない XML ファイルによるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer には、MSXML が正しく解析できないような XML ファイルにアクセスした場合、URL は適切にフィルタリングされないため、クロスサイトスクリプティングが発生する脆弱性が存在します。 CVE-2003-0446 7272 CVE-2003-0446 73574 4.3 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000185.html 2003-06-17 2007-04-01 View