CVE-2003-0531
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script...
CVE-2003-0531 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published August 22, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.5%, the 98th percentile. No source names a fixed version.
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
Exploit likelihood
What each source reports
NVD Score used
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
- Record
CVE-2003-0531- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
- Record
CVE-2003-0531- Updated
- 2026-11-02
EUVDEUVD-2003-0525 No score
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
- Record
EUVD-2003-0525- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g8p4-36wj-pppg No score
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script...
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
- Record
GHSA-g8p4-36wj-pppg- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
secunia.com/advisories/9580
cert.org/advisories/CA-2003-22.html
lac.co.jp/security/english/snsadv_e/67_e.html
exchange.xforce.ibmcloud.com/vulnerabilities/12961
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-032
kb.cert.org/vuls/id/205148
securityfocus.com/bid/8457
nvd.nist.gov/vuln/detail/CVE-2003-0531
github.com/advisories/GHSA-g8p4-36wj-pppg