Lucene search

[email protected]CVE-2001-0002

HistoryJul 21, 2001 - 4:00 a.m.

CVE-2001-0002

2001-07-2104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

internet explorer 5.5

remote attack

cache content access

program execution

cve-2001-0002

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.062 Low

EPSS

Percentile

93.5%

JSON

Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.

CPENameOperatorVersion
microsoft:windows_script_hostmicrosoft windows script hosteq5.1
microsoft:internet_explorermicrosoft internet explorereq5.01
microsoft:windows_script_hostmicrosoft windows script hosteq5.5
microsoft:internet_explorermicrosoft internet explorerle5.5

CPE	Name	Operator	Version
microsoft:windows_script_host	microsoft windows script host	eq	5.1
microsoft:internet_explorer	microsoft internet explorer	eq	5.01
microsoft:windows_script_host	microsoft windows script host	eq	5.5
microsoft:internet_explorer	microsoft internet explorer	le	5.5

References

www.guninski.com/chmtempmain.html

www.osvdb.org/7823

www.securityfocus.com/bid/2456

docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015

exchange.xforce.ibmcloud.com/vulnerabilities/5567

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920

7.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.062 Low

EPSS

Percentile

93.5%

JSON

Related for CVE-2001-0002

openvas2