CVE-2003-0814
high · 7.5Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
7.5
CVSS
27.7%
EPSS (exploit prob.)
98th
EPSS percentile
2004-02-03
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | ie | 6.0 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.0.1 |
| microsoft | internet_explorer | 5.5 |
| microsoft | internet_explorer | 5.5 |
| microsoft | internet_explorer | 5.5 |
| microsoft | internet_explorer | 6.0 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/10192
- http://securitytracker.com/id?1007687
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html
- http://www.kb.cert.org/vuls/id/326412
- http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm
- http://www.securityfocus.com/archive/1/337086
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A335
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A341
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A342
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A343
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A344
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A349
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A392
- http://secunia.com/advisories/10192
- http://securitytracker.com/id?1007687
- http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html
- http://www.kb.cert.org/vuls/id/326412
- http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm
- http://www.securityfocus.com/archive/1/337086
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A335
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A341
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A342
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A343
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2003-0814