CVE-2003-0116

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check the Cascading Style Sheet input parameter for Modal dialogs, which allows remote attackers to read files on the local system via a web page containing script that creates a dialog and then accesses the target files, aka "Modal Dialog script execution."

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/244729US Government Resource
http://www.securityfocus.com/archive/1/301945
http://www.securityfocus.com/bid/6306Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
http://www.kb.cert.org/vuls/id/244729US Government Resource
http://www.securityfocus.com/archive/1/301945
http://www.securityfocus.com/bid/6306Exploit, Patch, Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015

Timeline

Published: May 12, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-01177.5Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute ar CVE-2003-01187.5SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remot CVE-2003-01197.5The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attacker CVE-2003-01201.2adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default CVE-2003-01217.5Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version hea CVE-2003-01225.0Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via CVE-2003-01235.0Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of serv CVE-2003-01244.6man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf funct CVE-2003-01255.0Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reb CVE-2003-01267.5The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blan CVE-2003-01277.2The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using p CVE-2003-01285.0The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denia