CVE-2003-1041

Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.
References
Link Resource
http://www.kb.cert.org/vuls/id/187196 US Government Resource
http://www.securityfocus.com/archive/1/348521 Exploit Vendor Advisory
http://www.securityfocus.com/bid/9320 Exploit Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA04-196A.html Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023
https://exchange.xforce.ibmcloud.com/vulnerabilities/14105
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956
http://www.kb.cert.org/vuls/id/187196 US Government Resource
http://www.securityfocus.com/archive/1/348521 Exploit Vendor Advisory
http://www.securityfocus.com/bid/9320 Exploit Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA04-196A.html Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023
https://exchange.xforce.ibmcloud.com/vulnerabilities/14105
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

History

20 Nov 2024, 23:46

Type Values Removed Values Added
References () http://www.kb.cert.org/vuls/id/187196 - US Government Resource () http://www.kb.cert.org/vuls/id/187196 - US Government Resource
References () http://www.securityfocus.com/archive/1/348521 - Exploit, Vendor Advisory () http://www.securityfocus.com/archive/1/348521 - Exploit, Vendor Advisory
References () http://www.securityfocus.com/bid/9320 - Exploit, Vendor Advisory () http://www.securityfocus.com/bid/9320 - Exploit, Vendor Advisory
References () http://www.us-cert.gov/cas/techalerts/TA04-196A.html - Third Party Advisory, US Government Resource () http://www.us-cert.gov/cas/techalerts/TA04-196A.html - Third Party Advisory, US Government Resource
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/14105 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/14105 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956 -

Information

Published : 2004-06-14 04:00

Updated : 2024-11-20 23:46


NVD link : CVE-2003-1041

Mitre link : CVE-2003-1041

CVE.ORG link : CVE-2003-1041


JSON object : View

Products Affected

microsoft

  • internet_explorer
  • ie