CVEvulnerability
CVE-2001-0002
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-07-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
Affected configurations
• microsoft internet explorer (<= 5.5)
• microsoft internet explorer 5.01
• microsoft windows script host 5.1
• microsoft windows script host 5.5
References
- http://www.guninski.com/chmtempmain.html www.guninski.com
- http://www.osvdb.org/7823 www.osvdb.org
- http://www.securityfocus.com/bid/2456 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5567 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920 oval.cisecurity.org
- http://www.guninski.com/chmtempmain.html www.guninski.com
- http://www.osvdb.org/7823 www.osvdb.org
- http://www.securityfocus.com/bid/2456 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5567 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920 oval.cisecurity.org