CVE-2003-0814

No fix known EPSS 28%

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href" to the malicious Javascript, then calling execCommand("Refresh") to refresh the page, aka BodyRefreshLoadsJPU or the "ExecCommand Cross Domain" vulnerability.

Published 2004-01-14 · CVE record · OSV

Products: microsoft ie, microsoft internet_explorer