CVE-2003-0113 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 39.4% (pctl 99)
Patch early
A public exploit exists.
Description
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 39.37% — more likely to be exploited than 99% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-05-12 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | ie |
| microsoft | internet explorer |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Internet Explorer 5 - Remote 'URLMON.dll' Remote Buffer Overflow | 2003-04-23 |
References
- http://marc.info/?l=bugtraq&m=105138417416900&w=2
- http://marc.info/?l=bugtraq&m=105718285107246&w=2
- http://www.kb.cert.org/vuls/id/169753
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A926
- http://marc.info/?l=bugtraq&m=105138417416900&w=2
- http://marc.info/?l=bugtraq&m=105718285107246&w=2
- http://www.kb.cert.org/vuls/id/169753
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A926
→ the Explorer · watch your stack · NVD