Vulnerability Details CVE-2001-0149
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.436
EPSS Ranking 97.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html
- http://marc.info/?l=ntbugtraq&m=96999020527583&w=2
- http://www.securityfocus.com/bid/1718
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5293
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html
- http://marc.info/?l=ntbugtraq&m=96999020527583&w=2
- http://www.securityfocus.com/bid/1718
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5293
Products affected by CVE-2001-0149
-
cpe:2.3:a:microsoft:internet_explorer:-
-
cpe:2.3:a:microsoft:internet_explorer:3.0
-
cpe:2.3:a:microsoft:internet_explorer:3.0.1
-
cpe:2.3:a:microsoft:internet_explorer:3.0.2
-
cpe:2.3:a:microsoft:internet_explorer:3.1
-
cpe:2.3:a:microsoft:internet_explorer:3.2
-
cpe:2.3:a:microsoft:internet_explorer:4.0
-
cpe:2.3:a:microsoft:internet_explorer:4.0.1
-
cpe:2.3:a:microsoft:internet_explorer:4.01
-
cpe:2.3:a:microsoft:internet_explorer:4.1
-
cpe:2.3:a:microsoft:internet_explorer:4.40.308
-
cpe:2.3:a:microsoft:internet_explorer:4.40.520
-
cpe:2.3:a:microsoft:internet_explorer:4.5
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1155
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1158
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1215
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1300
-
cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3
-
cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6
-
cpe:2.3:a:microsoft:internet_explorer:4.71.544
-
cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8
-
cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8
-
cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713
-
cpe:2.3:a:microsoft:internet_explorer:5
-
cpe:2.3:a:microsoft:internet_explorer:5.0
-
cpe:2.3:a:microsoft:internet_explorer:5.0.1
-
cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10
-
cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.01
-
cpe:2.3:a:microsoft:internet_explorer:5.1
-
cpe:2.3:a:microsoft:internet_explorer:5.2.3
-
cpe:2.3:a:microsoft:internet_explorer:5.5