Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2003-0816 | First vendor Publication | 2004-02-03 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0816 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:361 | |||
| Oval ID: | oval:org.mitre.oval:def:361 | ||
| Title: | IE v5.01,SP2 Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 4 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:362 | |||
| Oval ID: | oval:org.mitre.oval:def:362 | ||
| Title: | IE v5.01,SP3 Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 4 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:363 | |||
| Oval ID: | oval:org.mitre.oval:def:363 | ||
| Title: | IE v5.01,SP4 Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 4 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:409 | |||
| Oval ID: | oval:org.mitre.oval:def:409 | ||
| Title: | IE v5.5,SP2 Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 3 |
| Platform(s): | Microsoft Windows ME Microsoft Windows NT Microsoft Windows 2000 | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:416 | |||
| Oval ID: | oval:org.mitre.oval:def:416 | ||
| Title: | IE v6.0,SP1 Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 4 |
| Platform(s): | Microsoft Windows ME Microsoft Windows NT Microsoft Windows 2000 Microsoft Windows XP | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:459 | |||
| Oval ID: | oval:org.mitre.oval:def:459 | ||
| Title: | IE v6.0,SP1 (Server 2003) Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 5 |
| Platform(s): | Microsoft Windows Server 2003 | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:479 | |||
| Oval ID: | oval:org.mitre.oval:def:479 | ||
| Title: | IE v6.0 (XP) Script URLs Cross Domain Zone Restrictions Bypass | ||
| Description: | Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the "Script URLs Cross Domain" vulnerability. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0816 | Version: | 4 |
| Platform(s): | Microsoft Windows XP | Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2005-11-03 | Name : IE 5.01 5.5 6.0 Cumulative patch (890923) File : nvt/smb_nt_ms02-005.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 7893 | Microsoft IE window.open file: Security Bypass (WsOpenFileJPU) |
| 3099 | Microsoft IE _search Window Execute Code (WsBASEjpu) Microsoft Internet Explorer allows a remote attacker to gain sensitive information about a vulnerable system. Due to a flaw in the _search window, an attacker can bypass authentication and use the file protocol to gain information or execute arbitrary code. |
| 3098 | Microsoft IE history.back NAF Function Execute Script (NAFjpuInHistory) Microsoft Internet Explorer allows a remote attacker to obtain sensitive information about other Web sites or execute arbitrary JavaScript. The issue is due to a vulnerability in the history.back and NavigateAndFind function. |
| 3097 | Microsoft IE window.open Function Execute Code (WsFakeSrc) Microsoft Internet Explorer allows a remote attacker to obtain sensitive information from a remote system or execute arbitrary code. The issue is due to a flaw in the window.open function and the permissions it honors between windows. A remote attacker could create a malicious HTML document that would use this function to obtain sensitive information and execute arbitrary JavaScript in the security context of the web page being viewed.. |
| 3096 | Microsoft IE NavigateAndFind Function Execute Code (NAFfileJPU) Microsoft Internet Explorer allows a remote attacker to obtain sensitive information from a remote machine. The issue is due to a flaw in the NavigateAndFind function and how it operates with the file protocol. An attacker can create a custom HTML document using this function to obtain sensitive information about the system, or execute arbitrary code in a different window. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Internet Explorer RAV Online Scanner ActiveX object access RuleID : 4188 - Revision : 12 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Symantec RuFSI registry Information Class ActiveX object access RuleID : 4174 - Revision : 14 - Type : BROWSER-PLUGINS |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:23:11 |
|
| 2024-11-28 12:05:44 |
|
| 2021-07-27 00:24:37 |
|
| 2021-07-24 01:44:15 |
|
| 2021-07-24 01:01:35 |
|
| 2021-07-23 17:24:41 |
|
| 2021-07-23 01:44:03 |
|
| 2021-07-23 01:01:34 |
|
| 2021-07-22 21:24:59 |
|
| 2021-05-04 12:02:09 |
|
| 2021-04-22 01:02:15 |
|
| 2020-05-23 00:15:30 |
|
| 2018-10-13 00:22:27 |
|
| 2017-10-11 09:23:18 |
|
| 2016-10-18 12:01:13 |
|
| 2016-04-26 12:37:35 |
|
| 2013-05-11 11:53:04 |
|
