CVE-2003-0115

high · 7.5

Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233.

7.5

CVSS

11.6%

EPSS (exploit prob.)

96th

EPSS percentile

2003-05-12

Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

Vendor	Product	Affected versions
microsoft	ie	6.0
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.0.1
microsoft	internet_explorer	5.5
microsoft	internet_explorer	5.5
microsoft	internet_explorer	5.5
microsoft	internet_explorer	6.0

Check a specific version with /api/v1/cve/match.

References

http://www.iss.net/security_center/static/11848.php
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
http://www.iss.net/security_center/static/11848.php
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0115