Vulnerabilities > CVE-2003-0817 - Unspecified vulnerability in Microsoft IE and Internet Explorer
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 9 |
Oval
accepted 2014-02-24T04:03:21.028-05:00 class vulnerability contributors name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Robert L. Hollis organization ThreatGuard, Inc. name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:508 status accepted submitted 2003-11-12T12:00:00.000-04:00 title IE v5.01,SP2 Zone Restrictions Bypass via XML Vulnerability version 67 accepted 2014-02-24T04:03:21.669-05:00 class vulnerability contributors name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Robert L. Hollis organization ThreatGuard, Inc. name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:520 status accepted submitted 2003-11-12T12:00:00.000-04:00 title IE v5.01,SP3 Zone Restrictions Bypass via XML Vulnerability version 67 accepted 2014-02-24T04:03:22.619-05:00 class vulnerability contributors name Tiffany Bergeron organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Christine Walzer organization The MITRE Corporation name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:543 status accepted submitted 2003-11-12T05:00:00.000-04:00 title IE v6.0 (XP) Zone Restrictions Bypass via XML Vulnerability version 67 accepted 2014-02-24T04:03:22.682-05:00 class vulnerability contributors name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Robert L. Hollis organization ThreatGuard, Inc. name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:548 status accepted submitted 2003-11-12T12:00:00.000-04:00 title IE v5.01,SP4 Zone Restrictions Bypass via XML Vulnerability version 67 accepted 2014-02-24T04:03:23.104-05:00 class vulnerability contributors name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:549 status accepted submitted 2003-11-12T12:00:00.000-04:00 title IE v5.5,SP2 Zone Restrictions Bypass via XML Vulnerability version 66 accepted 2014-02-24T04:03:23.353-05:00 class vulnerability contributors name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Robert L. Hollis organization ThreatGuard, Inc. name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:556 status accepted submitted 2003-11-12T12:00:00.000-04:00 title IE v6.0,SP1 Zone Restrictions Bypass via XML Vulnerability version 67 accepted 2014-02-24T04:03:23.677-05:00 class vulnerability contributors name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Andrew Buttner organization The MITRE Corporation name Harvey Rubinovitz organization The MITRE Corporation name Robert L. Hollis organization ThreatGuard, Inc. name Maria Mikhno organization ALTX-SOFT
description Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object. family windows id oval:org.mitre.oval:def:566 status accepted submitted 2003-11-12T12:00:00.000-04:00 title IE v6.0,SP1 (Server 2003) Zone Restrictions Bypass via XML Vulnerability version 68
References
- http://www.securityfocus.com/bid/9012
- http://secunia.com/advisories/10192
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A566
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A556
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A549
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A548
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A543
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A520
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A508
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048