gm014-ie.txt

GreyMagic Security Advisory GM014-IE ===================================== By GreyMagic Software, Israel. 17 Jun 2003. Available in HTML format at http://security.greymagic.com/adv/gm014-ie/. Topic: Script Injection to Custom HTTP Errors in Local Zone. Discovery date: 18 Feb 2003. Affected...

CVE-2003-0447

The CVE-2003-0447 issue affects Internet Explorer versions 5.01, 5.5 and 6.0, where the Custom HTTP Errors capability can be abused via an argument to shdocvw.dll to generate a javascript: link, enabling remote script execution in the Local Zone. The vulnerability is described as allowing remote ...