CVE-2003-1026

CVE-2003-1026 describes a critical vulnerability in Microsoft Internet Explorer versions 5.01 through 6 SP1, allowing remote attackers to bypass security zone restrictions. An attacker could craft a malicious JavaScript protocol URL within a sub-frame, which, when added to the browser's history and subsequently accessed via the history.back function, would execute in the top window's more privileged security zone. This vulnerability carries a CVSS score of 9.3, indicating high severity with network-based attacks, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, an ExploitDB entry exists (EDB-151), and the vulnerability has garnered significant community discussion with over 10 mentions, suggesting awareness and potential for exploitation.