Buffer Overflow in URLMON.DLL

Overview

A buffer overflow in URLMON.DDL may allow an intruder to execute arbitrary code.

Description

URLMON.DLL is a library used by Microsoft Internet Explorer. It contains a buffer overflow that could allow an intruder to execute arbitrary code if the intruder can convince the victim to visit a malicious web page or, in some limited circumstances, open a malicious email message. For more information, see Microsoft Security Bulletin MS03-015.

---

Impact

An intruder could execute arbitrary code with the privileges of the user operating the vulnerable web browser or email client.

---

Solution

Apply a patch as described in MS03-015.

---

Vendor Information

Javascript is disabled. Click here to view vendors.

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://www.microsoft.com/technet/security/bulletin/MS03-015.asp&gt;
• <http://msdn.microsoft.com/workshop/networking/pluggable/pluggable.asp&gt;

Acknowledgements

Thanks to Microsoft Corporation for reporting this vulnerability.

This document was written by Shawn V Hernan based on information provided by Microsoft.

Other Information

CVE IDs:	CVE-2003-0113
Severity Metric:	10.80 Date Public: