CVE-2003-0447: Microsoft Internet Explorer

Medium severity, CVSS 5.1. EPSS: 13.7% chance of exploitation in the next 30 days.

The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.

Affected products

• Microsoft Internet Explorer: version 5.01 only; version 5.5 only; version 6.0 only

Published 2003-07-24. Last modified 2026-06-16.