NVD

Id
73913  
Name
CVE-2003-0814  
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window"s "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2004-02-03  
Modified Date
2008-09-10  
Seq
2003-0814  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380005 73913 CVE-2003-0814 oval:org.mitre.oval:def:335  View
380006 73913 CVE-2003-0814 oval:org.mitre.oval:def:341  View
380007 73913 CVE-2003-0814 oval:org.mitre.oval:def:342  View
380008 73913 CVE-2003-0814 oval:org.mitre.oval:def:343  View
380009 73913 CVE-2003-0814 oval:org.mitre.oval:def:344  View
380010 73913 CVE-2003-0814 oval:org.mitre.oval:def:349  View
380011 73913 CVE-2003-0814 oval:org.mitre.oval:def:392  View
380012 73913 CVE-2003-0814 1007687  View
380013 73913 CVE-2003-0814 20030910 MSIE->BodyRefreshLoadsJPU:refresh is a new navigation method  View
380014 73913 CVE-2003-0814 VU#326412  View
380015 73913 CVE-2003-0814 MS03-048  View
380016 73913 CVE-2003-0814 http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm  View
380017 73913 CVE-2003-0814 20030911 LiuDieYu"s missing files are here.  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63607 JVNDB-2003-000333 Microsoft Internet Explorer の ExecCommand メソッドにおける任意のコードを実行される脆弱性 Microsoft Internet Explorer には、ExecCommand メソッドに対するクロスドメインセキュリティチェックの実装の不備により、異なるドメインのデータへアクセス可能な脆弱性が存在します。 CVE-2003-0814 7637 CVE-2003-0814 73913 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000333.html 2003-11-11 2007-04-01 View