CVE-2003-1328
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types...
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
Exploit likelihood
What each source reports
NVD Score used
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
- Record
CVE-2003-1328- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
- Record
CVE-2003-1328- Updated
- 2026-11-02
EUVDEUVD-2003-1318 No score
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
- Record
EUVD-2003-1318- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p598-2cg3-8qjf No score
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types...
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
- Record
GHSA-p598-2cg3-8qjf- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Internet Explorer 5 - ShowHelp Arbitrary Command Execution | 2003-02-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-1328 is a high vulnerability (CVSS 7.5) in Microsoft Internet Explorer, published February 19, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 38.9%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A57
ciac.org/ciac/bulletins/n-038.shtml
securityfocus.com/bid/6780
kb.cert.org/vuls/id/400577
archives.neohapsis.com/archives/bugtraq/2003-02/0083.html
iss.net/security_center/static/11259.php
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-004
nvd.nist.gov/vuln/detail/CVE-2003-1328
github.com/advisories/GHSA-p598-2cg3-8qjf