CVE-2003-0115: Microsoft Ie

High severity, CVSS 7.5. EPSS: 11.6% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 5.01, 5.5 and 6.0 does not properly check parameters that are passed during third party rendering, which could allow remote attackers to execute arbitrary web script, aka the "Third Party Plugin Rendering" vulnerability, a different vulnerability than CVE-2003-0233.

Affected products

• Microsoft Ie: version 6.0 only
• Microsoft Internet Explorer: version 5.0.1 only; version 5.5 only; version 6.0 only

Published 2003-05-12. Last modified 2026-06-16.