CVE-2003-0519: Microsoft Internet Explorer

Medium severity, CVSS 5.0. EPSS: 10.8% chance of exploitation in the next 30 days.

Certain versions of Internet Explorer 5 and 6, in certain Windows environments, allow remote attackers to cause a denial of service (freeze) via a URL to C:\aux (MS-DOS device name) and possibly other devices.

Affected products

• Microsoft Internet Explorer: version 5.0 only; version 6.0 only

Published 2003-08-18. Last modified 2026-06-16.