VDB
CVE-2003-0814
CVE-2003-0814
PUBLISHED
CVSS 7.5 HIGH
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.
EPSS 30.72% · 96.8th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
30.72%
96.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | internet_explorer | 6.0, 5.5, 5.5 |
| n/a | n/a | n/a |
| microsoft | ie | 6.0 |
Timeline
- Jan 14, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm url
- oval:org.mitre.oval:def:335 vdb
- oval:org.mitre.oval:def:342 vdb
- MS03-048 vendor-advisory
- 1007687 vdb
- oval:org.mitre.oval:def:392 vdb
- oval:org.mitre.oval:def:341 vdb
- 20030911 LiuDieYu's missing files are here. mailing-list
- oval:org.mitre.oval:def:344 vdb
- oval:org.mitre.oval:def:349 vdb
- oval:org.mitre.oval:def:343 vdb
- 20030910 MSIE->BodyRefreshLoadsJPU:refresh is a new navigation method mailing-list
- VU#326412 third-party-advisory
- 10192 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2003-0814 advisory