CVEvulnerability

CVE-2001-1325

7.5 HIGH Published 2001-04-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-04-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).

Affected configurations

• microsoft internet explorer 5.0 • microsoft internet explorer 5.5 • microsoft outlook express 5.0 • microsoft outlook express 5.5

References