CVE-2003-1025: microsoft internet_explorer Improper Input Validation

EPSS trend

Probability

26.91%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 26.91% on 21-09-2026

21-09-202621-10-2026

EPSS score

26.91%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (zapthedingbat.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (1)
Maturity: weaponized
exploit-databaseremotewindowsVerified
Microsoft Internet Explorer 5/6 / Mozilla 1.2.1 - URI Display Obfuscation (2)
Maturity: weaponized

Show all 4 exploits

exploit-databaseremotewindowsVerified
Opera Browser 6.0 6 - URI Display Obfuscation
Maturity: weaponized

References

13 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510VDB EntrySignatureX Refsource OVAL
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526VDB EntrySignatureX Refsource OVAL
www.kb.cert.org/vuls/id/652278Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/archive/1/346948Mailing ListX Refsource BUGTRAQVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513VDB EntrySignatureX Refsource OVAL
exchange.xforce.ibmcloud.com/vulnerabilities/13935VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491VDB EntrySignatureX Refsource OVAL
www.us-cert.gov/cas/techalerts/TA04-033A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512VDB EntrySignatureX Refsource OVAL
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490VDB EntrySignatureX Refsource OVAL

Show all 13 references

docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004Vendor AdvisoryX Refsource MS
www.zapthedingbat.com/security/ex01/vun1.htmX Refsource MISCExploitVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511VDB EntrySignatureX Refsource OVAL

Related vulnerabilities

CVE-2003-1048microsoftinternet_explorer+726.63%22y ago21-07-2004 04:00Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.CVE-2003-0513microsoftie+19.77%22y ago16-03-2004 05:00Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.CVE-2013-3893microsoftinternet_explorerKEV87.64%13y ago18-09-2013 10:00Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.CVE-2007-1765microsoftie+354.60%19y ago30-03-2007 00:00Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and icons, a similar issue to CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this issue might be a duplicate of CVE-2007-0038; if so, then use CVE-2007-0038 instead of this identifier.CVE-2007-0942microsoftie+132.20%19y ago08-05-2007 23:00Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.CVE-2007-0218microsoftinternet_explorer31.13%19y ago12-06-2007 19:00Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.

All vulnerabilities ininternet_explorer

CVE-2003-1025: microsoft internet_explorer Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References