CVE-2003-0309 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0309
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0309

Description: Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability."

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/12019 SAID Secunia Advisory: SA8807 OVAL http://oval.mitre.org/oval/definitions/data/oval948.html NTBUGTRAQ http://marc.theaimsgroup.com/?l=ntbugtraq&m=105294162726096&w=2 MS http://www.microsoft.com/technet/security/bulletin/ms03-020.asp CERT-VN 251788 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=105294081325040&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=105249399103214&w=2 BID 7539

Return to the previous page.