CVE-2003-0532 is a critical vulnerability affecting Microsoft Internet Explorer versions 5.01 SP3 through 6.0 SP1, where the browser fails to correctly identify object types returned by web servers. This flaw allows remote attackers to execute arbitrary code on a user's system by leveraging an object tag with a data parameter pointing to a malicious file served with an unsafe Content-Type. With a CVSS score of 7.5, it represents a high-severity risk, requiring no authentication and low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While no public exploit intelligence like Metasploit or ExploitDB entries exist, and there's minimal community discussion or media coverage, its high FAUCET Risk Score of 91/100 indicates significant potential danger.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.0CPE matchmatch criteria | cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:* | ||
5.0.1CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:* | ||
5.0.1CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:* | ||
5.0.1CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:* | ||
5.0.1CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.