Published: 19/02/2003 Updated: 23/07/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote malicious users to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet explorer 5.0.1
microsoft internet explorer 5.5
microsoft internet explorer 6.0
microsoft ie 6.0

source: wwwsecurityfocuscom/bid/6780/info Microsoft Internet Explorer implements the showHelp() function as a means of displaying help content contained in HTML pages However, this function is capable of performing too many other actions outside of its intended functionality through pluggable protocols These actions could include readin ...

NVD-CWE-Other http://www.iss.net/security_center/static/11259.php http://archives.neohapsis.com/archives/bugtraq/2003-02/0083.html http://www.kb.cert.org/vuls/id/400577 http://www.ciac.org/ciac/bulletins/n-038.shtml http://www.securityfocus.com/bid/6780 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004 https://nvd.nist.gov https://www.exploit-db.com/exploits/22226/https://www.kb.cert.org/vuls/id/400577

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2003-1328

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect