NVD

Id
73914  
Name
CVE-2003-0815  
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the Function Pointer Override Cross Domain vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-02-03  
Modified Date
2017-07-10  
Seq
2003-0815  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380018 73914 CVE-2003-0815 20030910 MSIE->LinkillerJPU:another caller-based authorization(is broken).  View
380019 73914 CVE-2003-0815 20030910 MSIE->Findeath: break caller-based authorization  View
380020 73914 CVE-2003-0815 oval:org.mitre.oval:def:351  View
380021 73914 CVE-2003-0815 oval:org.mitre.oval:def:352  View
380022 73914 CVE-2003-0815 oval:org.mitre.oval:def:353  View
380023 73914 CVE-2003-0815 oval:org.mitre.oval:def:356  View
380024 73914 CVE-2003-0815 oval:org.mitre.oval:def:357  View
380025 73914 CVE-2003-0815 oval:org.mitre.oval:def:359  View
380026 73914 CVE-2003-0815 oval:org.mitre.oval:def:472  View
380027 73914 CVE-2003-0815 1007687  View
380028 73914 CVE-2003-0815 O-021  View
380029 73914 CVE-2003-0815 20030910 MSIE->LinkillerSaveRef:another caller-based authorization  View
380030 73914 CVE-2003-0815 MS03-048  View
380031 73914 CVE-2003-0815 http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM  View
380032 73914 CVE-2003-0815 http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM  View
380033 73914 CVE-2003-0815 http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM  View
380034 73914 CVE-2003-0815 20030911 LiuDieYu"s missing files are here.  View
380035 73914 CVE-2003-0815 9014  View
380036 73914 CVE-2003-0815 ie-pointer-zone-bypass(13676)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63608 JVNDB-2003-000334 Microsoft Internet Explorer における関数ポインタが上書きされる脆弱性 Microsoft Internet Explorer には、他のドメインのデータソースへのアクセスを禁止するクロスドメインセキュリティチェックの実装の不備のため、関数ポインタが上書き可能な脆弱性が存在します。 CVE-2003-0815 7638 CVE-2003-0815 73914 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000334.html 2003-11-11 2007-04-01 View