CVE Vulnerabilities

CVE-2003-1026

Published: Jan 20, 2004 | Modified: Jul 23, 2021
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top windows zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the Travel Log Cross Domain Vulnerability.

Affected Software

Name Vendor Start Version End Version
Internet_explorer Microsoft 5.5 5.5
Internet_explorer Microsoft 5.5 5.5
Internet_explorer Microsoft 5.0.1 5.0.1
Internet_explorer Microsoft 5.0.1 5.0.1
Internet_explorer Microsoft 5.0 5.0
Internet_explorer Microsoft 5.5 5.5
Internet_explorer Microsoft 6.0 6.0
Internet_explorer Microsoft 5.0.1 5.0.1
Internet_explorer Microsoft 5.0.1 5.0.1
Ie Microsoft 6.0 6.0

References