What’s Vulnerable › Vulnerabilities

CVE-2003-0116

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 25.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2003-05-12 · updated 2026-06-16

Description

Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal Dialog script execution."

Affected products

• Microsoft Ie: 6.0-sp1
• Microsoft Internet Explorer 11: 5.0.1, 5.0.1-sp1, 5.0.1-sp2, 5.0.1-sp3, 5.5, 5.5-sp1 (+2)

References

• http://www.kb.cert.org/vuls/id/244729
• http://www.securityfocus.com/archive/1/301945
• http://www.securityfocus.com/bid/6306
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
• http://www.kb.cert.org/vuls/id/244729
• http://www.securityfocus.com/archive/1/301945
• http://www.securityfocus.com/bid/6306
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015

Get alerted when CVE-2003-0116 or the next vulnerability affects your stack