NVD

Id
73915  
Name
CVE-2003-0816  
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2004-02-03  
Modified Date
2016-10-17  
Seq
2003-0816  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380037 73915 CVE-2003-0816 20030910 MSIE->RefBack  View
380038 73915 CVE-2003-0816 20030910 MSIE->NAFjpuInHistory  View
380039 73915 CVE-2003-0816 20030910 MSIE->WsFakeSrc  View
380040 73915 CVE-2003-0816 20030910 MSIE->WsOpenFileJPU  View
380041 73915 CVE-2003-0816 20030910 MSIE->WsBASEjpu  View
380042 73915 CVE-2003-0816 20030910 MSIE->BackMyParent2:Multi-Thread version  View
380043 73915 CVE-2003-0816 oval:org.mitre.oval:def:361  View
380044 73915 CVE-2003-0816 oval:org.mitre.oval:def:362  View
380045 73915 CVE-2003-0816 oval:org.mitre.oval:def:363  View
380046 73915 CVE-2003-0816 oval:org.mitre.oval:def:409  View
380047 73915 CVE-2003-0816 oval:org.mitre.oval:def:416  View
380048 73915 CVE-2003-0816 oval:org.mitre.oval:def:459  View
380049 73915 CVE-2003-0816 oval:org.mitre.oval:def:479  View
380050 73915 CVE-2003-0816 1007687  View
380051 73915 CVE-2003-0816 20030910 MSIE->WsOpenJpuInHistory  View
380052 73915 CVE-2003-0816 VU#652452  View
380053 73915 CVE-2003-0816 VU#771604  View
380054 73915 CVE-2003-0816 MS03-048  View
380055 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/BackMyParent/BackMyParent-content.htm  View
380056 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/BackMyParent2/BackMyParent2-Content.HTM  View
380057 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/NAFjpuInHistory/NAFjpuInHistory-Content.HTM  View
380058 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/RefBack/RefBack-Content.HTM  View
380059 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/WsBASEjpu/WsBASEjpu-Content.HTM  View
380060 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/WsFakeSrc/WsFakeSrc-Content.HTM  View
380061 73915 CVE-2003-0816 http://www.safecenter.net/liudieyu/WsOpenJpuInHistory/WsOpenJpuInHistory-Content.HTM  View
380062 73915 CVE-2003-0816 http://www.safecenter.net/UMBRELLAWEBV4/NAFfileJPU/NAFfileJPU-Content.htm  View
380063 73915 CVE-2003-0816 http://www.safecenter.net/UMBRELLAWEBV4/WsOpenFileJPU/WsOpenFileJPU-Content.HTM  View
380064 73915 CVE-2003-0816 20030910 MSIE->NAFfileJPU  View
380065 73915 CVE-2003-0816 20030911 LiuDieYu"s missing files are here.  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63609 JVNDB-2003-000335 Microsoft Internet Explorer にクロスドメインセキュリティチェックを回避して、不正なスクリプト URL を解釈してしまう脆弱性 Microsoft Internet Explorer には、他のドメインのデータソースへのアクセスを禁止するクロスドメインセキュリティチェックを回避して、不正なスクリプト URL を解釈してしまう脆弱性が存在します。 CVE-2003-0816 7639 CVE-2003-0816 73915 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000335.html 2003-11-11 2007-04-01 View