CVE-2003-0113: microsoft ie
Vulnerability summary
CVE-2003-0113 is a high (CVSS 7.5) vulnerability in microsoft ie. EPSS estimates a 39.37% chance of exploitation in the next 30 days, higher than 98.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 26-04-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in (1) Content-type and (2) Content-encoding fields.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
39.37%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 39.37% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Internet Explorer 5 - Remote 'URLMON.dll' Remote Buffer Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft2 products
- ie6.0:sp1
- internet_explorer5.01 | 5.01:sp1 | 5.01:sp2 | 5.01:sp3 | 5.5 | 5.5:sp1 | 5.5:sp2 | 6.0
1 vendor · 2 products
References
5 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A926VDB EntrySignatureX Refsource OVAL
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-015Vendor AdvisoryX Refsource MS