CVE-2001-0002
First published: Mon May 07 2001(Updated: )
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Internet Explorer | <=5.5 | |
| Internet Explorer | =5.01 | |
| Microsoft Windows Script Host | =5.1 | |
| Microsoft Windows Script Host | =5.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.guninski.com/chmtempmain.html
- http://www.securityfocus.com/bid/2456
- http://www.osvdb.org/7823
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5567
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
Frequently Asked Questions
What is the severity of CVE-2001-0002?
CVE-2001-0002 is considered a critical vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2001-0002?
To mitigate CVE-2001-0002, users should upgrade to a later version of Internet Explorer or apply appropriate security patches from Microsoft.
What versions of Internet Explorer are affected by CVE-2001-0002?
CVE-2001-0002 affects Internet Explorer versions 5.5 and earlier, including version 5.01.
Can CVE-2001-0002 allow remote attackers to run programs on my computer?
Yes, CVE-2001-0002 can be exploited by remote attackers to execute arbitrary programs on a vulnerable system.
What type of files can be used in the attack for CVE-2001-0002?
Compiled HTML help (.chm) files can be leveraged in the attacks associated with CVE-2001-0002.
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/microsoft
- canonical/internet explorer
- version/internet explorer/5.5
- version/internet explorer/5.01
- canonical/microsoft windows script host
- version/microsoft windows script host/5.1
- version/microsoft windows script host/5.5