CVE-2003-0815

Published Jan 14, 2004 CVSS 2.0 · 7.5 High EPSS 18.7% KEV · Not listed
Description
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 8, 2024, 2:05 AM
Reserved
Sep 18, 2003, 12:00 AM
Status
Modified
Published
Feb 3, 2004, 5:00 AM
Modified
Jun 16, 2026, 10:02 PM