NVD

Id
74098  
Name
CVE-2003-1026  
Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the Travel Log Cross Domain Vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-01-20  
Modified Date
2017-07-10  
Seq
2003-1026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380985 74098 CVE-2003-1026 20031125 BackToFramedJpu - a successor of BackToJpu attack  View
380986 74098 CVE-2003-1026 20031201 Comments on 5 IE vulnerabilities  View
380987 74098 CVE-2003-1026 oval:org.mitre.oval:def:630  View
380988 74098 CVE-2003-1026 oval:org.mitre.oval:def:643  View
380989 74098 CVE-2003-1026 oval:org.mitre.oval:def:687  View
380990 74098 CVE-2003-1026 oval:org.mitre.oval:def:689  View
380991 74098 CVE-2003-1026 oval:org.mitre.oval:def:745  View
380992 74098 CVE-2003-1026 oval:org.mitre.oval:def:774  View
380993 74098 CVE-2003-1026 oval:org.mitre.oval:def:805  View
380994 74098 CVE-2003-1026 VU#784102  View
380995 74098 CVE-2003-1026 MS04-004  View
380996 74098 CVE-2003-1026 http://www.safecenter.net/UMBRELLAWEBV4/BackToFramedJpu  View
380997 74098 CVE-2003-1026 TA04-033A  View
380998 74098 CVE-2003-1026 ie-subframe-xss(13846)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63631 JVNDB-2003-000357 Microsoft Internet Explorer の history.back() 関数におけるクロスサイトスクリプティングの脆弱性 Microsoft Internet Explorer には、サブフレームを含む Web ページにおいてセキュリティゾーンが回避される脆弱性が存在します。 CVE-2003-1026 7849 CVE-2003-1026 74098 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000357.html 2003-11-25 2007-04-01 View