CVE-2003-0309

CVE-2003-0309 describes a security zone bypass vulnerability in Microsoft Internet Explorer versions 5.01, 5.5, and 6.0. Remote attackers could exploit this by crafting a web document with numerous duplicate file:// requests, causing multiple download dialogs to appear, ultimately leading to arbitrary program execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While not listed on the CISA KEV catalog, an exploit (EDB-22575) exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.