CVE-2003-0447 | BDVDB-2026-5596 Detail

Description#

The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005763.html
http://marc.info/?l=bugtraq&m=105585933614773&w=2
http://security.greymagic.com/adv/gm014-ie/
http://marc.info/?l=ntbugtraq&m=105585142406147&w=2

Exploit#

No public exploit known

History#

Version 12003-06-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.