CVE-2003-0815

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-02-03 · updated 2026-06-16

Description

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the "Function Pointer Override Cross Domain" vulnerability.

Affected products

Microsoft Ie: 6.0-sp1
Microsoft Internet Explorer 11: 5.0.1, 5.0.1-sp1, 5.0.1-sp2, 5.0.1-sp3, 5.5, 5.5-sp1 (+2)

References

http://marc.info/?l=bugtraq&m=106321757619047&w=2
http://marc.info/?l=bugtraq&m=106322542104656&w=2
http://secunia.com/advisories/10192
http://securitytracker.com/id?1007687
http://www.ciac.org/ciac/bulletins/o-021.shtml
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html
http://www.osvdb.org/7888
http://www.osvdb.org/7889
http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM
http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM
http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM
http://www.securityfocus.com/archive/1/337086

Get alerted when CVE-2003-0815 or the next vulnerability affects your stack