Vulnerabilities > CVE-2003-0809 - Unspecified vulnerability in Microsoft IE and Internet Explorer

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
microsoft
exploit available
NVD
Published: 2003-11-17
Updated: 2021-07-23

Summary

Internet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.

Vulnerable Configurations

Part Description Count
Application
Microsoft
9

Exploit-Db

descriptionMicrosoft Internet Explorer 5 XML Page Object Type Validation Vulnerability. CVE-2003-0809. Remote exploit for windows platform
idEDB-ID:23122
last seen2016-02-02
modified2003-09-08
published2003-09-08
reporterhttp-equiv
sourcehttps://www.exploit-db.com/download/23122/
titleMicrosoft Internet Explorer 5 XML Page Object Type Validation Vulnerability

Oval

accepted2014-02-24T04:00:11.283-05:00
classvulnerability
contributors
  • nameTiffany Bergeron
    organizationThe MITRE Corporation
  • nameTiffany Bergeron
    organizationThe MITRE Corporation
  • nameChristine Walzer
    organizationThe MITRE Corporation
  • nameRobert L. Hollis
    organizationThreatGuard, Inc.
  • nameMaria Mikhno
    organizationALTX-SOFT
descriptionInternet Explorer 5.01 through 6.0 does not properly handle object tags returned from a Web server during XML data binding, which allows remote attackers to execute arbitrary code via an HTML e-mail message or web page.
familywindows
idoval:org.mitre.oval:def:123
statusaccepted
submitted2003-11-12T05:00:00.000-04:00
titleIE Improper Object Tag Handling
version68

References