PT-2004-1165

CVE-2003-0816

·

Published

2004-01-14

·

Updated

2021-07-23

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Internet Explorer versions 6 SP1 and earlier
Description The issue allows remote attackers to bypass zone restrictions. This can be achieved through several methods, including using the NavigateAndFind method to load a file: URL containing Javascript, utilizing the window.open method to load a file: URL containing Javascript, setting the href property in the base tag for the search window, loading the search window into an Iframe, or caching a javascript: URL in the browser history and then accessing that URL in the same frame as the target domain.
Recommendations For Internet Explorer versions 6 SP1 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾