CVE-2003-0446
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet Explorer是一款流行的WEB浏览程序。MS IE使用MSXML解析器解析XML文件时存在问题，远程攻击者可以利用这个漏洞进行跨站脚本执行攻击，可能窃取目标用户敏感信息。当MSXML解析器在读取XML文件失败时，会显示解析错误并包含在请求的URL中，由于对URL中的恶意HTML代码处理不充分，攻击者构建恶意链接，诱使用
Public Exploits 1
ExploitDB · 1
EDB-22783 [remote]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2003-0446
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows remote attackers to insert arbitrary web script via an XML file that contains a parse error, which inserts the script in the resulting error message.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Internet Explorer安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet Explorer是一款流行的WEB浏览程序。MS IE使用MSXML解析器解析XML文件时存在问题，远程攻击者可以利用这个漏洞进行跨站脚本执行攻击，可能窃取目标用户敏感信息。当MSXML解析器在读取XML文件失败时，会显示解析错误并包含在请求的URL中，由于对URL中的恶意HTML代码处理不充分，攻击者构建恶意链接，诱使用
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2003-0446
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2003-0446
请登录查看更多情报信息。
Vendor Advisories for CVE-2003-0446 (3)
Mailing List Discussions for CVE-2003-0446 (5)
-
-
-
http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005762.html mailing-list x_refsource_FULLDISC
-
-
Other References for CVE-2003-0446 (1)
-
http://security.greymagic.com/adv/gm013-ie/ x_refsource_MISC
Same Patch Batch · n/a · 2003-06-20 · 11 CVEs total
| CVE-2003-0381 | Noweb/Noroff以不安全方式建立临时文件漏洞 | |
| CVE-2003-0389 | RSA SecurID ACE Agent跨站脚本执行漏洞 | |
| CVE-2003-0427 | MikMod超长文件名本地缓冲区溢出漏洞 | |
| CVE-2003-0436 | MNOGoSearch search.cgi ul变量远程缓冲区溢出漏洞 | |
| CVE-2003-0437 | MNOGoSearch search.cgi tmplt变量远程缓冲区溢出漏洞 | |
| CVE-2003-0442 | PHP Transparent会话ID跨站脚本执行漏洞 | |
| CVE-2003-0447 | Microsoft Internet Explorer安全漏洞 | |
| CVE-2003-0448 | Portmon文件操作漏洞 | |
| CVE-2003-0449 | Progress Database获取特权漏洞 | |
| CVE-2003-0450 | Cistron RADIUS远程有符号NAS-PORT值导致内存破坏漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-94043
Free5GC Gmm handler.go race condition -
CVE-2026-94030
SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data intege -
CVE-2026-94004
DedeCMS mytag_js.php code injection -
CVE-2026-93962
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-ba -
CVE-2026-93960
Pixelfed OAuth Scope ApiV1Controller.php instancePeers missi
V. Comments for CVE-2003-0446
No comments yet