VDB

GCVE-110-CERTCC-2003-326412

GCVE-110-CERTCC-2003-326412
Advisory Published
Vulnetix · Advisory published September 10, 2003
Microsoft Internet Explorer (IE) does not properly determine the source of script used in URLs. An attacker could exploit this vulnerability to evaluate script in different security domains. By causing script to be evaluated in the Local Machine Zone, the attacker could execute arbitrary code with the privileges of the user running IE.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact15population18exploitation5widely_known18score_current42.09975ease_of_exploitation14

Aliases

CVE-2003-0814

Transitive aliases

GHSA-38fc-cmwf-cfvcEUVD-2003-0805GSD-2003-0814

References

Microsoft Internet Explorer execCommand method does not properly validate URL source
url
Microsoft Internet Explorer execCommand method does not properly validate URL source
url
Microsoft Internet Explorer execCommand method does not properly validate URL source
url
Microsoft Internet Explorer execCommand method does not properly validate URL source
url
Microsoft Internet Explorer execCommand method does not properly validate URL source
url
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory
Microsoft Internet Explorer execCommand method does not properly validate URL source
advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›