Vulnerability Details : CVE-2003-0344

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.

Vulnerability category: OverflowExecute code

Published 2003-06-16 04:00:00

Updated 2021-07-23 12:55:04

Source MITRE

View at NVD, CVE.org

At least one public exploit which can be used to exploit this vulnerability exists!

Exploit prediction scoring system (EPSS) score for CVE-2003-0344

Probability of exploitation activity in the next 30 days: 97.08%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ

Metasploit modules for CVE-2003-0344

MS03-020 Microsoft Internet Explorer Object Type

Disclosure Date : 2003-06-04

exploit/windows/browser/ms03_020_ie_objecttype

This module exploits a vulnerability in Internet Explorer's handling of the OBJECT type attribute. Authors: - skape <[email protected]>

More information

CVSS scores for CVE-2003-0344

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2003-0344

Products affected by CVE-2003-0344