CVE-2003-0532

Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to…

published August 22, 2003

CVSS

—

EPSS

23%

Percentile

97.7

In the wild

Unconfirmed

What it is

Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to execute arbitrary code via an object tag with a data parameter to a malicious file hosted on a server that returns an unsafe Content-Type, aka the "Object Type" vulnerability.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.22957 · 97.7th percentile
Published: 2003-08-22T04:00Z

EPSS history

Timeline

22 AUG 04:00Z
Internet Explorer 5.01 SP3 through 6.0 SP1 does not properly determine object types that are returned by web servers, which could allow remote attackers to…
cvelistv5