CVE-2003-1025
- State
- Published
- Severity
- Not scored
- Published
- Jan 6, 2004
- Updated
- Aug 8, 2024
- Reserved
- Jan 6, 2004
Description
Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "%01" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the "Improper URL Canonicalization Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:510vdb-entrysignature
- oval:org.mitre.oval:def:526vdb-entrysignature
- VU#652278third-party-advisory
- 20031209 Internet Explorer URL parsing vulnerabilitymailing-list
- oval:org.mitre.oval:def:513vdb-entrysignature
- ie-domain-url-spoofing(13935)vdb-entry
- oval:org.mitre.oval:def:491vdb-entrysignature
- TA04-033Athird-party-advisory
- oval:org.mitre.oval:def:512vdb-entrysignature
- oval:org.mitre.oval:def:490vdb-entrysignature
- MS04-004vendor-advisory
- http://www.zapthedingbat.com/security/ex01/vun1.htm
- oval:org.mitre.oval:def:511vdb-entrysignature
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.